Bloomberg Law: Privacy & Data Security brings you single-source access to the expertise of Bloomberg Law’s privacy and data security editorial team, contributing practitioners,...
BEIJING--China's National People's Congress (NPC), the country's top legislative body, Dec. 28 enacted new rules that seek to increase protection of online personal data but at the same time require internet users to reveal their real names, according to a same day statement by the central government.
The “Decision of the Standing Committee of the National People's Congress to Strengthen the Protection of Internet Data,” which took effect immediately upon its passage, bans the sale or distribution of an individual's personal digital information without consent, requires internet service providers to ensure the security of personal data and prevent its misuse, and gives individuals the right to seek deletion of personal data posted without consent and the right to sue for violations of the law.
The legislation is “a positive move for the public benefit” that “helps bring China closer to having its own data privacy laws” and achieves “the basic framework for internet data privacy protection,” Alan Chiu, a partner at Mayer Brown JSM in Hong Kong, told BNA Jan. 4.
The new rules establish the broad principle that personally identifiable electronic data are protected by the government, Chiu said. It clarifies the duties and obligations of website operators and internet service providers to protect internet users' data and outlines possible consequences for data privacy breaches. It also expressly prohibits email and text message spam, he said.
But questions remain about how the rules will be implemented, Chiu said. For example, the legislation does not specify which governmental department or agency will supervise or enforce the rules, he noted.
The law says that violators may be given a warning, fined, have illegal income confiscated, face cancellation of permits or other business privileges, or have their websites shut down. It does not, however, provide specific fines or jail terms for criminal violations, or contain civil fine details.
China began to address the issue of online personal data protection in 2012, with the release of a new Ministry of Industry and Information regulation requiring Chinese websites to follow stricter rules on user consent to the collection and sharing of their personal data (11 PVLR 304, 2/13/12).
Those rules, which took effect in March 2012, require ISPs to inform users how their data would be used. They introduced internationally recognized concepts such as data consent requirements, a provision on safeguarding information and use limitation. Practitioners told BNA at the time that the rules fell short because they only applied to ISPs.
The new rules include all organizations and individuals that handle personal data, within their scope, saying that “no organization or individual” may steal, sell, or illegally distribute an individual's personal data without consent.
According to a Jan. 2 Hunton & Williams LLP blog post, personal data covered by the law includes “electronic information that can identify individuals and implicate their private affairs.”
The new law requires online users to register their real names with their internet or telecommunications service provider, raising free speech concerns among China's over 500 million web users, including bloggers.
Li Fei, deputy director of the Commission for Legislative Affairs of the NPC, was quoted by China's official government-controlled Xinhua news agency as calling such worries “unnecessary” and said individuals would still be able to expose cases of corruption online.
“Identity management work can be conducted backstage, allowing users to use different names when posting material publicly,” Li was quoted as saying.
By Leslie A. Pappas
The “Decision of the Standing Committee of the National People's Congress to Strengthen the Protection of Internet Data” is available, in Chinese, at http://www.gov.cn/jrzg/2012-12/28/content_2301231.htm.
The Jan. 2 Hunton & Williams LLP blog post is available at http://www.huntonprivacyblog.com/2013/01/articles/chinese-legislature-passes-data-privacy-resolution/.
All Bloomberg BNA treatises are available on standing order, which ensures you will always receive the most current edition of the book or supplement of the title you have ordered from Bloomberg BNA’s book division. As soon as a new supplement or edition is published (usually annually) for a title you’ve previously purchased and requested to be placed on standing order, we’ll ship it to you to review for 30 days without any obligation. During this period, you can either (a) honor the invoice and receive a 5% discount (in addition to any other discounts you may qualify for) off the then-current price of the update, plus shipping and handling or (b) return the book(s), in which case, your invoice will be cancelled upon receipt of the book(s). Call us for a prepaid UPS label for your return. It’s as simple and easy as that. Most importantly, standing orders mean you will never have to worry about the timeliness of the information you’re relying on. And, you may discontinue standing orders at any time by contacting us at 1.800.960.1220 or by sending an email to email@example.com.
Put me on standing order at a 5% discount off list price of all future updates, in addition to any other discounts I may quality for. (Returnable within 30 days.)
Notify me when updates are available (No standing order will be created).
This Bloomberg BNA report is available on standing order, which ensures you will all receive the latest edition. This report is updated annually and we will send you the latest edition once it has been published. By signing up for standing order you will never have to worry about the timeliness of the information you need. And, you may discontinue standing orders at any time by contacting us at 1.800.372.1033, option 5, or by sending us an email to firstname.lastname@example.org.
Put me on standing order
Notify me when new releases are available (no standing order will be created)