Cyberspace Administration of China, Key Reference Points for Compliance Audits of the Protection of Personal Information (Draft for Comments)

国家互联网信息办公室个人信息保护合规审计参考要点 (征求意见稿)

September 05, 2023 | BY

Susan Mok

Lawfulness of personal information processing is the focus of an compliance audit.

Issued: August 3, 2023

Main contents:   In a compliance audit of the protection of personal information, the basic lawfulness conditions of the personal information processing activities shall be examined on a priority basis, focusing, among others, on whether the consent of the individuals was secured for the processing of their personal information and whether such consent was given freely and expressly with full knowledge on the part of the personal information subjects (Article 2).

When auditing the rules for the processing of personal information, the examination shall focus, among others, on the following matters whether the name and contact information of the personal information handler were communicated truthfully, accurately and completely (Article 3).

This premium content is reserved for
China Law & Practice Subscribers.

  • A database of over 3,000 essential documents including key PRC legislation translated into English
  • A choice of newsletters to alert you to changes affecting your business including sector specific updates
  • Premium access to the mobile optimized site for timely analysis that guides you through China's ever-changing business environment
For enterprise-wide or corporate enquiries, please contact our experienced Sales Professionals at +44 (0)203 868 7546 or [email protected]