China conducts annual audits of companies with personal information of more than 1 million people

Central News Agency and Dongmang(東網) reported on the 3rd that Chinese authorities, which are strengthening control over the Internet industry, whose influence has grown rapidly, have decided to conduct annual audits of service companies that hold more than 1 million personal information.

According to the media, the Chinese regulatory authority, the State Internet Information Office (國家互聯網信息辦公室), announced on the same day that it would force business operators handling personal information of more than 1 million people to undergo a review at least once a year to check whether they comply with relevant laws and regulations (個人信息保護). The Law of Consolidation and Reconciliation) was published.

 

In addition, the draft rule requires large Internet platform operators to establish an independent body, mainly composed of external members, to manage and supervise the situation of personal information protection, and to evaluate the independent body's independence, ability to perform duties, and supervisory role during regular audits.

 

The rule mandates that these businesses undergo security inspections by agencies appointed by the authorities when providing data abroad.

 

In addition, the rule stipulates that agencies appointed by the authorities will review service companies with data of more than 100,000 people and companies with confidential data of more than 10,000 people.

 

For service providers with less than 1 million user data, they are subject to compliance audits at least once every two years.

 

In recent years, the Chinese government has been particularly sensitive to data and information leaked abroad, expanding its management and supervision.

Enjoyed this article? Stay informed by joining our newsletter!

Comments

You must be logged in to post a comment.

About Author