Implementation Rules for Certification of Personal Information Protection Published
ISSUING AUTHORITIES:
Cyberspace Administration of China
State Administration for Market Regulation
DATE OF ISSUANCE:
November 18, 2022
To implement the relevant provisions of the Personal Information Protection Law of the People's Republic of China, and standardize personal information processing activities, the Cyberspace Administration of China and the State Administration for Market Regulation jointly published the Implementation Rules for Certification of Personal Information Protection (the “Rules”) on November 18, 2022.
The Rules set out basic principles and requirements for the certification of personal information processors carrying out processing activities such as the collection, storage, use, processing, transmission, provision, disclosure, deletion, and cross-border processing of personal information.
The Rules also stipulate that the certification method of personal information protection certification is “technical verification + on-site audit + post-certification supervision”. The certificate is valid for three years.
Reference:
