China News Service, Beijing, August 20. The 30th meeting of the 13th National People's Congress Standing Committee voted on the 20th to pass the Personal Information Protection Law, which will come into force on November 1, 2021.
In recent years, issues such as excessive collection of personal information, big data familiarization, and processing of sensitive personal information have become hot issues in the protection of personal information, and have attracted much attention from the outside world.
The Personal Information Protection Law clarifies the rules for personal information processing and cross-border provision, and the obligations of personal information processors.
This law stipulates that no organization or individual may illegally collect, use, process, or transmit the personal information of others, or illegally trade, provide, or disclose the personal information of others.
In response to the problem of excessive collection of information and big data, this law clarifies that the processing of personal information should have a clear and reasonable purpose, and should be directly related to the purpose of processing, and adopt a method that has the least impact on personal rights; personal information processors use individuals Information makes automated decision-making, and no unreasonable differential treatment shall be imposed on individuals in terms of transaction prices and other transaction conditions.
In response to the abuse of face recognition technology, this law requires that the installation of image collection and personal identification equipment in public places should be set up with prominent reminders; the collected personal images and identification information can only be used for the purpose of maintaining public safety.
For personal information processors that provide important Internet platform services, a large number of users, and complex business types, this law specifically stipulates the obligations they need to perform, such as establishing and improving a personal information protection compliance system, and regularly publishing personal information protection social responsibility reports , Accept social supervision, etc.
In addition, the Personal Information Protection Law further strengthens the supervision responsibilities of relevant departments and severely punishes illegal acts.
If the department performing personal information protection duties finds that there is a greater risk in personal information processing activities or a personal information security incident occurs, it may conduct an interview with the legal representative or main person in charge of the personal information processor in accordance with the prescribed authority and procedures, or Personal information processors are required to entrust professional institutions to conduct compliance audits of their personal information processing activities.
(over)