Personal information protection

Law of the People's Republic of China on the Protection of Personal Information (effective November 1, 2021)

Articles 54 and 64: Provide the basic legal framework for personal information protection compliance audits, requiring companies to proactively fulfill their auditing obligations and cooperate with supervision.

Regulations on Network Data Security Management (effective January 1, 2025)

Article 27: To further refine the auditing requirements, network data processors shall periodically conduct compliance audits, either on their own or by commissioning professional organizations, of their handling of personal information in compliance with laws and administrative regulations.

Measures for the Management of Compliance Audits on Personal Information Protection (issued on February 14, 2025, effective May 1, 2025)

The first supporting rules for personal information protection compliance audits were formalized.

Google Chrome is rolling out a new feature designed to disable third-party cookies and improve user privacy protection. The change will first be rolled out in beta form to around 1% users worldwide. While Chrome's main rivals Safari and Firefox already offer similar privacy-protecting features, advertisers have expressed concerns about the move, saying it could hurt their business.

Google agreed to pay $5 billion to settle a privacy lawsuit alleging that the company tracked users in incognito mode. The lawsuit accused Google of using tools such as Google Analytics to collect data on users even when they thought they were browsing privately.

With the rapid development and popularization of the digital economy, consumers' awareness of personal privacy protection in various consumption scenarios is also increasing. This article focuses on analyzing the high-frequency scenarios of personal privacy leakage in the food delivery industry and its governance measures. Taking the "Privacy Form", a consumer personal user privacy data protection plan under the "Consumer Personal Privacy Protection Special" on the Ele.me platform, as an example, we interpret the new model of user privacy data protection in the takeout scenario and analyze the entire business chain. The difficulty and feasibility of the road.

In order to guide and standardize personal information protection compliance audit activities, in accordance with the "Personal Information Protection Law of the People's Republic of China" and other laws and regulations, the Cyberspace Administration of China has drafted the "Personal Information Protection Compliance Audit Management Measures (Draft for Comments)", which is now submitted to Public opinion solicitation…