Cyberspace Administration of China, Measures for the Administration of Data Security (Draft for Comments)

Main contents: A network operator may not compel or mislead a personal information subject to consent to its collection of personal information by means such as tacit authorization or bundling of functions on the grounds of improving service quality, enhancing user experience, directional pushing of information, development of a new product, etc.