On July 6, the NPC released a draft Cybersecurity Law (source document in Chinese) to: (i) ensure network security; (ii) preserve cyberspace sovereignty, national security, and societal public interest; (iii) protect the lawful rights and interests of citizens, legal persons, and other organizations; and (iv) promote the healthy development of economic and social informatization. The law would require network operators to establish and complete user information protection systems and strengthen protection of users' personal information, privacy, and commercial secrets. Network operators using citizens' personal information would also have to provide notice and obtain consent where appropriate.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.