Law Digest

• National Information Security Standardization Technical Committee, Practice Guidelines for Cybersecurity Standards—Methods for Labeling Generative Artificial Intelligence Service Content

  全国信息安全标准化技术委员会秘书处网络安全标准实践指南——生成式人工智能服务内容标识方法

  Practice guidelines are issued specifying labeling of AI content

  September 28, 2023

• Secretariat of the National Information Security Standardization Technical Committee, Information Security Technology—Security Requirements for Processing of Sensitive Personal Information (Draft for Comments)

  全国信息安全标准化技术委员会秘书处信息安全技术 敏感个人信息处理安全要求 (征求意见稿）

  Processing of sensitive personal information may require written consent of the individual

  September 28, 2023

• Office of the Central Cyberspace Affairs Commission, Specifications for the Work Associated with the Acceptance of, and Dealing with, Reports of Enterprise-Related Online Infringement Information by Website Platforms

  中央网络安全和信息化委员会办公室网站平台受理处置涉企网络侵权信息举报工作规范

  Website platforms are responsible for dealing with online enterprise-related infringement information

  September 17, 2023

• Secretariat of the National Information Security Standardization Technical Committee, Information Security Technology — Security Requirements for Automated Decision Making Based on Personal Information (Draft for Comments)

  全国信息安全标准化技术委员会秘书处信息安全技术 基于个人信息的自动化决策安全要求 (征求意见稿)

  Guidelines are given for informing individuals of automated decision processing of their personal information

  September 05, 2023

• Cyberspace Administration of China, Key Reference Points for Compliance Audits of the Protection of Personal Information (Draft for Comments)

  国家互联网信息办公室个人信息保护合规审计参考要点 (征求意见稿)

  Lawfulness of personal information processing is the focus of an compliance audit.

  September 05, 2023

• National Administration of Financial Regulation, Implementing Measures for the Administrative Permission Items of Non-Bank Financial Institutions (Draft for Comments)

  国家金融监督管理总局非银行金融机构行政许可事项实施办法 (征求意见稿)

  National Administration of Financial Regulation permits overseas non-financial institutions to serve as investors in financial asset management companies.

  August 25, 2023

• Cyberspace Administration of China, Measures for the Administration of Compliance Audits of the Protection of Personal Information (Draft for Comments)

  国家互联网信息办公室个人信息保护合规审计管理办法 (征求意见稿)

  Companies that collect a large amount of personal information are required to conduct a compliance audit of its protection of personal information annually

  August 15, 2023

• Cyberspace Administration of China, Provisions for the Administration of the Security in the Application of Facial Recognition Technology (Trial Implementation) (Draft for Comments)

  国家互联网信息办公室人脸识别技术应用安全管理规定 (试行) (征求意见稿)

  Facial recognition may not be carried out if other non-biometric identification technology solutions are available

  August 15, 2023

• National Administration of Financial Regulation, Measures for the Administration of Auto Finance Companies

  国家金融监督管理总局汽车金融公司管理办法

  The financial requirements for establishing auto finance companies are substantially increased

  August 09, 2023

• People's Bank of China, Measures for the Administration of Data Security in the Business Areas of the People's Bank of China (Draft for Comments)

  中国人民银行中国人民银行业务领域数据安全管理办法 (征求意见稿)

  People's Bank of China issues rules restricting cross-border transfer of its business data

  August 09, 2023