China’s State Administration of Industry and Commerce has released for public comment a draft regulation implementing recent amendments to a consumer protection law that would supplement existing privacy obligations for businesses operating in China. Some of the new modified requirements include the fact that collection of consumer personal information by a business operator would need to be related to its business operations, business operators would need to retain for at least five years proof that they fulfilled their obligations to inform and obtain consent from consumers, and business operators would be prohibited from “tampering with or destroying” consumer personal information.
