May 31, 2010
---------------------
Monday
>>>Welcome visitor, you're not logged in.
Login   Subscribe Now!
Home User Management About Us Chinese
  Bookmark   Download   Print
Search:  serch "Fabao" Window Font Size: Home PageHome PageHome Page
 
Personal Information Protection Law of the People's Republic of China [Not Yet Effective]
中华人民共和国个人信息保护法 [尚未生效]
【法宝引证码】
 
  
  
Order of the President of the People's Republic of China 

中华人民共和国主席令

(No. 91) (第九十一号)

The Personal Information Protection Law of the People's Republic of China, as adopted at the 30th session of the Standing Committee of the Thirteenth National People's Congress of the People's Republic of China on August 20, 2021, is hereby issued, and shall come into force on November 1, 2021. 《中华人民共和国个人信息保护法》已由中华人民共和国第十三届全国人民代表大会常务委员会第三十次会议于2021年8月20日通过,现予公布,自2021年11月1日起施行。
Xi Jinping, President of the People's Republic of China 中华人民共和国主席 习近平
August 20, 2021 2021年8月20日
Personal Information Protection Law of the People's Republic of China 中华人民共和国个人信息保护法
(Adopted at the 30th session of the Standing Committee of the Thirteenth National People's Congress on August 20, 2021) (2021年8月20日第十三届全国人民代表大会常务委员会第三十次会议通过)
Contents 目  录
Chapter I General Provisions 第一章 总  则
Chapter II Personal Information Processing Rules 第二章 个人信息处理规则
Section 1 General Rules 第一节 一般规定
Section 2 Rules of Processing of Sensitive Personal Information 第二节 敏感个人信息的处理规则
Section 3 Specific Provisions on the Processing of Personal Information by State Organs 第三节 国家机关处理个人信息的特别规定
Chapter III Rules of Cross-Border Provision of Personal Information 第三章 个人信息跨境提供的规则
Chapter IV Individuals' Rights in Personal Information Processing Activities 第四章 个人在个人信息处理活动中的权利
Chapter V Obligations of Personal Information Processors 第五章 个人信息处理者的义务
Chapter VI Authorities Performing Personal Information Protection Functions 第六章 履行个人信息保护职责的部门
Chapter VII Legal Liability 第七章 法律责任
Chapter VIII Supplemental Provisions 第八章 附  则
Chapter I General Provisions 

第一章 总  则

Article 1 This Law is enacted in accordance with the Constitution for the purposes of protecting rights and interests relating to personal information, regulating personal information processing activities, and promoting the reasonable use of personal information.   第一条 为了保护个人信息权益,规范个人信息处理活动,促进个人信息合理利用,根据宪法,制定本法。
Article 2 The personal information of natural persons shall be protected by law. No organization or individual may infringe upon natural persons' rights and interests relating to personal information.   第二条 自然人的个人信息受法律保护,任何组织、个人不得侵害自然人的个人信息权益。
Article 3 This Law shall apply to the processing within the territory of the People's Republic of China of the personal information of natural persons.   第三条 在中华人民共和国境内处理自然人个人信息的活动,适用本法。
This Law shall also apply to the processing outside the territory of the People's Republic of China of the personal information of natural persons located within the territory of the People's Republic of China if the information is processed: 在中华人民共和国境外处理中华人民共和国境内自然人个人信息的活动,有下列情形之一的,也适用本法:
(1) for the purpose of providing products or services to natural persons located within China; (一)以向境内自然人提供产品或者服务为目的;
(2) to analyze or assess the conduct of natural persons located within China; or (二)分析、评估境内自然人的行为;
(3) under any other circumstance as provided by any law or administrative regulation. (三)法律、行政法规规定的其他情形。
Article 4 “Personal information” means all kinds of information related to identified or identifiable natural persons that are electronically or otherwise recorded, excluding information that has been anonymized.   第四条 个人信息是以电子或者其他方式记录的与已识别或者可识别的自然人有关的各种信息,不包括匿名化处理后的信息。
Personal information processing includes, but is not limited to, the collection, storage, use, processing, transmission, provision, disclosure, and deletion of personal information. 个人信息的处理包括个人信息的收集、存储、使用、加工、传输、提供、公开、删除等。
Article 5 Personal information shall be processed under the principles of lawfulness, legitimacy, necessity and good faith, and shall not be processed in a way that is misleading, fraudulent or coercive.   第五条 处理个人信息应当遵循合法、正当、必要和诚信原则,不得通过误导、欺诈、胁迫等方式处理个人信息。
Article 6 Personal information processing shall be for a clear and reasonable purpose, directly related to the processing purpose and in a manner that has the minimum impact on the rights and interests of individuals.   第六条 处理个人信息应当具有明确、合理的目的,并应当与处理目的直接相关,采取对个人权益影响最小的方式。
Collection of personal information shall be limited to the minimum scope necessary for achieving the processing purpose and shall not be excessive. 收集个人信息,应当限于实现处理目的的最小范围,不得过度收集个人信息。
Article 7 Personal information shall be processed under the principles of openness and transparency, with the rules of processing of personal information disclosed, and the purposes, methods, and scope of processing expressly stated.   第七条 处理个人信息应当遵循公开、透明原则,公开个人信息处理规则,明示处理的目的、方式和范围。
Article 8 The quality of personal information shall be guaranteed in the processing of personal information to avoid adverse impacts on the rights and interests of individuals due to inaccuracy or incompleteness of the personal information.   第八条 处理个人信息应当保证个人信息的质量,避免因个人信息不准确、不完整对个人权益造成不利影响。
Article 9 Personal information processors shall be responsible for their personal information processing activities, and take necessary measures to guarantee the security of the personal information they process.   第九条 个人信息处理者应当对其个人信息处理活动负责,并采取必要措施保障所处理的个人信息的安全。
Article 10 No organization or individual may illegally collect, use, process, or transmit the personal information of another person or illegally buy or sell, provide, or disclose the personal information of another person; or engage in personal information processing activities compromising national security or public interests.   第十条 任何组织、个人不得非法收集、使用、加工、传输他人个人信息,不得非法买卖、提供或者公开他人个人信息;不得从事危害国家安全、公共利益的个人信息处理活动。
Article 11 The state shall establish and improve the personal information protection system to prevent and punish infringements of rights and interests relating to personal information, strengthen publicity and education on personal information protection, and promote the creation of a favorable environment for the government, enterprises, relevant social organizations, and the public to jointly participate in personal information protection.   第十一条 国家建立健全个人信息保护制度,预防和惩治侵害个人信息权益的行为,加强个人信息保护宣传教育,推动形成政府、企业、相关社会组织、公众共同参与个人信息保护的良好环境。
Article 12 The state shall vigorously participate in the development of international rules of personal information protection, boost international exchange and cooperation in terms of personal information protection, and promote the mutual recognition of personal information protection rules and standards with other countries, regions, and international organizations.   第十二条 国家积极参与个人信息保护国际规则的制定,促进个人信息保护方面的国际交流与合作,推动与其他国家、地区、国际组织之间的个人信息保护规则、标准等互认。
Chapter II Personal Information Processing Rules 

第二章 个人信息处理规则

Section 1 General Rules 

第一节 一般规定

Article 13 A personal information processor may not process personal information unless:   第十三条 符合下列情形之一的,个人信息处理者方可处理个人信息:
(1) the individual's consent has been obtained; (一)取得个人的同意;
(2) the processing is necessary for the conclusion or performance of a contract to which the individual is a contracting party or for conducting human resource management under the labor rules and regulations developed in accordance with the law and a collective contract signed in accordance with the law; (二)为订立、履行个人作为一方当事人的合同所必需,或者按照依法制定的劳动规章制度和依法签订的集体合同实施人力资源管理所必需;
(3) the processing is necessary to fulfill statutory functions or statutory obligations; (三)为履行法定职责或者法定义务所必需;
(4) the processing is necessary to respond to public health emergencies or protect the life, health or property safety of natural persons under emergency circumstances; (四)为应对突发公共卫生事件,或者紧急情况下为保护自然人的生命健康和财产安全所必需;
(5) personal information is processed within a reasonable scope to conduct news reporting, public opinion-based supervision, or other activities in the public interest; (五)为公共利益实施新闻报道、舆论监督等行为,在合理的范围内处理个人信息;
(6) the personal information that has been disclosed by the individuals themselves or other personal information that has been legally disclosed is processed within a reasonable scope in accordance with this Law; or (六)依照本法规定在合理的范围内处理个人自行公开或者其他已经合法公开的个人信息;
(7) under any other circumstance as provided by any law or administrative regulation. (七)法律、行政法规规定的其他情形。
In accordance with other relevant provisions of this Law, an individual's consent shall be obtained for processing his or her personal information, except under the circumstances specified in subparagraphs (2) to (7) of the preceding paragraph. 依照本法其他有关规定,处理个人信息应当取得个人同意,但是有前款第二项至第七项规定情形的,不需取得个人同意。
Article 14 Where personal information is processed based on an individual's consent, such consent shall be voluntarily and explicitly given by the individual on a fully informed basis. Where any law or administrative regulation provides that the individual's separate consent or written consent shall be obtained for processing personal information, such provision shall prevail.   第十四条 基于个人同意处理个人信息的,该同意应当由个人在充分知情的前提下自愿、明确作出。法律、行政法规规定处理个人信息应当取得个人单独同意或者书面同意的,从其规定。
In the case of any change of the purpose or method of processing of personal information, or the category of personal information to be processed, the individual's consent shall be obtained anew. 个人信息的处理目的、处理方式和处理的个人信息种类发生变更的,应当重新取得个人同意。
Article 15 Where personal information is processed based on an individual's consent, the individual shall have the right to withdraw his or her consent. The personal information processor shall provide a convenient way to withdraw the consent.   第十五条 基于个人同意处理个人信息的,个人有权撤回其同意。个人信息处理者应当提供便捷的撤回同意的方式。
The individual's withdrawal of his or her consent does not affect the effectiveness of personal information processing activities that have been conducted based on his or her consent before the withdrawal of such consent. 个人撤回同意,不影响撤回前基于个人同意已进行的个人信息处理活动的效力。
Article 16 A personal information processor shall not refuse to provide products or services on the ground that the relevant individual does not consent to the processing of his or her personal information or withdraws consent, except that the processing of personal information is necessary for the provision of products or services.   第十六条 个人信息处理者不得以个人不同意处理其个人信息或者撤回同意为由,拒绝提供产品或者服务;处理个人信息属于提供产品或者服务所必需的除外。
Article 17 A personal information processor shall, before processing personal information, truthfully, accurately and completely notify individuals of the following matters in a conspicuous way and in clear and easily understood language:   第十七条 个人信息处理者在处理个人信息前,应当以显著方式、清晰易懂的语言真实、准确、完整地向个人告知下列事项:
(1) The name and contact information of the personal information processor. (一)个人信息处理者的名称或者姓名和联系方式;
(2) Purposes and methods of processing of personal information, categories of personal information to be processed, and the retention periods. (二)个人信息的处理目的、处理方式,处理的个人信息种类、保存期限;
(3) Methods and procedures for individuals to exercise the rights provided in this Law. (三)个人行使本法规定权利的方式和程序;
(4) Other matters that should be notified as provided by laws and administrative regulations. (四)法律、行政法规规定应当告知的其他事项。
Where any matter as set forth in the preceding paragraph changes, the individuals shall be notified of the change. 前款规定事项发生变更的,应当将变更部分告知个人。
Where the personal information processor notifies the matters as set forth in paragraph 1 in the manner of developing personal information processing rules, the processing rules shall be disclosed and easy to consult and preserve. 个人信息处理者通过制定个人信息处理规则的方式告知第一款规定事项的,处理规则应当公开,并且便于查阅和保存。
Article 18 Personal information processors processing personal information are not required to notify individuals of the matters as set forth in paragraph 1 of the preceding article if there are circumstances in which laws or administrative regulations provide that such processing shall be kept confidential or notification is not necessary.   第十八条 个人信息处理者处理个人信息,有法律、行政法规规定应当保密或者不需要告知的情形的,可以不向个人告知前条第一款规定的事项。
Where it is impossible to notify individuals in a timely manner for the protection of the life, health and property safety of natural persons under emergency circumstances, personal information processors shall notify them in a timely manner after the elimination of the emergency circumstances. 紧急情况下为保护自然人的生命健康和财产安全无法及时向个人告知的,个人信息处理者应当在紧急情况消除后及时告知。
Article 19 A retention period of personal information shall be the shortest time necessary to achieve the processing purpose, except as otherwise provided by any law or administrative regulation.   第十九条 除法律、行政法规另有规定外,个人信息的保存期限应当为实现处理目的所必要的最短时间。
Article 20 Where two or more personal information processors jointly decide on the purposes and methods of processing of personal information, they shall agree on their respective rights and obligations. However, such agreement does not affect an individual's request to any of the said personal information processors for exercising his or her rights as provided in this Law.   第二十条 两个以上的个人信息处理者共同决定个人信息的处理目的和处理方式的,应当约定各自的权利和义务。但是,该约定不影响个人向其中任何一个个人信息处理者要求行使本法规定的权利。
Where personal information processors jointly processing personal information infringe upon the rights and interests relating to personal information and cause damage, they shall bear joint and several liability in accordance with the law. 个人信息处理者共同处理个人信息,侵害个人信息权益造成损害的,应当依法承担连带责任。
Article 21 A personal information processor commissioning the processing of personal information shall agree with the commissioned party on the purposes and period of the commissioned processing, processing methods, categories of personal information, protection measures, as well as the rights and obligations of both parties, among others, and oversee the personal information processing activities of the commissioned party.   第二十一条 个人信息处理者委托处理个人信息的,应当与受托人约定委托处理的目的、期限、处理方式、个人信息的种类、保护措施以及双方的权利和义务等,并对受托人的个人信息处理活动进行监督。
The commissioned party shall process personal information as agreed, and shall not process personal information beyond the agreed purposes or methods of processing, among others. Where the commission contract has not taken effect or is null and void, revoked, or rescinded, the commissioned party shall return personal information to the personal information processor or delete it, and shall not retain such information. 受托人应当按照约定处理个人信息,不得超出约定的处理目的、处理方式等处理个人信息;委托合同不生效、无效、被撤销或者终止的,受托人应当将个人信息返还个人信息处理者或者予以删除,不得保留。
Without the consent of the personal information processor, the commissioned party shall not commission the commissioned processing of personal information. 未经个人信息处理者同意,受托人不得转委托他人处理个人信息。
Article 22 Where a personal information processor needs to transfer personal information due to combination, division, dissolution or declaration of bankruptcy, among others, it or he shall notify individuals of the name and contact information of the recipient. The recipient shall continue to perform the obligations of the personal information processor. If the recipient changes the original purposes or methods of processing, it or he shall obtain the individuals' consent anew in accordance with this Law.   第二十二条 个人信息处理者因合并、分立、解散、被宣告破产等原因需要转移个人信息的,应当向个人告知接收方的名称或者姓名和联系方式。接收方应当继续履行个人信息处理者的义务。接收方变更原先的处理目的、处理方式的,应当依照本法规定重新取得个人同意。
Article 23 A personal information processor that provides any other personal information processor with the personal information it or he processes shall notify individuals of the recipient's name, contact information, purposes and methods of processing, and categories of personal information, and obtain the individuals' separate consent. The recipient shall process personal information within the scope of the aforementioned purposes and methods of processing, and categories of personal information, among others. Where the recipient changes the original purposes or methods of processing, it or he shall obtain individuals' consent anew in accordance with this Law.   第二十三条 个人信息处理者向其他个人信息处理者提供其处理的个人信息的,应当向个人告知接收方的名称或者姓名、联系方式、处理目的、处理方式和个人信息的种类,并取得个人的单独同意。接收方应当在上述处理目的、处理方式和个人信息的种类等范围内处理个人信息。接收方变更原先的处理目的、处理方式的,应当依照本法规定重新取得个人同意。
Article 24 Where a personal information processor conducts automated decision-making by using personal information, it or he shall ensure the transparency of the decision-making and the fairness and impartiality of the result, and shall not give unreasonable differential treatment to individuals in terms of trading price or other trading conditions.   第二十四条 个人信息处理者利用个人信息进行自动化决策,应当保证决策的透明度和结果公平、公正,不得对个人在交易价格等交易条件上实行不合理的差别待遇。
Where information push or commercial marketing to individuals is conducted by means of automated decision-making, options not specific to individuals' characteristics shall be provided simultaneously, or convenient ways to refuse shall be provided to individuals. 通过自动化决策方式向个人进行信息推送、商业营销,应当同时提供不针对其个人特征的选项,或者向个人提供便捷的拒绝方式。
Where a decision that has a major impact on an individual's rights and interests is made by means of automated decision-making, the individual shall have the right to request the personal information processor to make explanations and to refuse to accept that the personal information processor makes decisions solely by means of automated decision-making. 通过自动化决策方式作出对个人权益有重大影响的决定,个人有权要求个人信息处理者予以说明,并有权拒绝个人信息处理者仅通过自动化决策的方式作出决定。
Article 25 Personal information processors shall not disclose the personal information processed, except with the separate consent of the individuals.   第二十五条 个人信息处理者不得公开其处理的个人信息,取得个人单独同意的除外。
Article 26 The installation of image collection or personal identification equipment in public places shall be necessary for maintaining public security and comply with relevant provisions issued by the state, and conspicuous signs shall be erected. The collected personal images and identification information can only be used for the purpose of maintaining public security, and shall not be used for other purposes, except with the separate consent of individuals.   第二十六条 在公共场所安装图像采集、个人身份识别设备,应当为维护公共安全所必需,遵守国家有关规定,并设置显著的提示标识。所收集的个人图像、身份识别信息只能用于维护公共安全的目的,不得用于其他目的;取得个人单独同意的除外。
...... ......



Dear visitor,you are attempting to view a subscription-based section of lawinfochina.com. If you are already a subscriber, please login to enjoy access to our databases . If you are not a subscriber, please subscribe . You can purchase a single article through Online Pay to immediately view and download this document. Should you have any questions, please contact us at:
+86 (10) 8268-9699 or +86 (10) 8266-8266 (ext. 153)
Mobile: +86 133-1157-0713
Fax: +86 (10) 8266-8268
database@chinalawinfo.com


 


您好:您现在要进入的是北大法律英文网会员专区,如您是我们英文用户可直接 登录,进入会员专区查询您所需要的信息;如您还不是我们 的英文用户,请注册并交纳相应费用成为我们的英文会员 ;您也可通过网上支付进行单篇购买,支付成功后即可立即查看本篇法规。如有问题请来电咨询;
Tel: +86 (10) 82689699, +86 (10) 82668266 ext. 153
Mobile: +86 13311570713
Fax: +86 (10) 82668268
E-mail: database@chinalawinfo.com


     
     
【法宝引证码】        北大法宝www.lawinfochina.com
Message: Please kindly comment on the present translation.
Confirmation Code:
Click image to reset code!
 
  Translations are by lawinfochina.com, and we retain exclusive copyright over content found on our website except for content we publish as authorized by respective copyright owners or content that is publicly available from government sources.

Due to differences in language, legal systems, and culture, English translations of Chinese law are for reference purposes only. Please use the official Chinese-language versions as the final authority. lawinfochina.com and its staff will not be directly or indirectly liable for use of materials found on this website.

We welcome your comments and suggestions, which assist us in continuing to improve the quality of our materials.
 
Home | Products and Services | FAQ | Disclaimer | Chinese | Site Map
©2012 Chinalawinfo Co., Ltd.    database@chinalawinfo.com  Tel: +86 (10) 8268-9699  京ICP证010230-8