The Ministry of Industry and Information Technology of the People’s Republic of China’s new privacy regulations entitled, Several Provisions on Regulation of the Order of Internet Information Service Market, have now gone into effect. The new regulation defines the personal information protection requirements applicable to Internet Information Service Providers (“IISPs”). It is the first national level of regulation that provides a definition of “user personal information” and that contains specific obligations and liabilities of IISPs to protect user personal information. Consistent with data protection regimes currently in place elsewhere in the world, IISPs will be required to provide much stronger protection for the personal data they collect from users in China, and will be subject to notice and consent requirements, collection limitations and use limitations.
Read more
