How to design a data privacy strategy in China

To finish off a busy 12 months in the world of data privacy, the Standing Committee of National People's Congress (NPC) has issued another Decision that enhances the protection of consumers' personal data and, most importantly, clearly establishes their right to sue businesses that infringe their rights. Passed on October 25 2013 and coming into force on March 15 2014, the provisions have been introduced as part of wider amendments to the PRC Law on the Protection of the Rights and Interests of Consumers (2nd Revision) (中华人民共和国消费者权益保护法 (第二次修正)) (Consumer Protection Law).

Following the NPC's Online Information Decision in late 2012 and the Ministry of Industry and Information Technology's (MIIT's) Provisions on the Protection of Personal Information of Telecommunications and Internet Users (电信和互联网用户个人信息保护规定) (MIIT's Personal Information Provisions), which took effect on September 1 2013, the new Consumer Protection Law rounds out the civil and administrative data privacy landscape in China.