A personal information handler shall, before handling personal information, truthfully, accurately and fully inform an individual of the following matters in an easy-to-notice manner and in clear and easy-to-understand language:
- the name and contact information of the personal information handler;
- the purposes and means of personal information handling, and the categories and storage periods of the personal information to be handled;
- the methods and procedures for the individual to exercise his rights as provided in this Law; and
- other matters that the individual should be notified of as provided by laws and administrative regulations.
Where any matter as set forth in the preceding paragraph changes, the individual shall be informed of the change.
Where the personal information handler informs an individual of the matters specified in the first paragraph by formulating personal information handling rules, the handling rules shall be made public and be easy to consult and save.
Related provisions:
- Additional notice before handling sensitive personal information
- Additional notice before cross-border transfer
- Exceptions to notice before handling
- Receiving and responding to demands to exercise rights
Relevant PIPL Compliance Documents
(Subscription Services Required)
- General Privacy Notice
- PIPL Privacy Notice
- Data handling policy for handlers
- Data handling policy for entrusted parties
- Data handling policy for joint handlers
- 2020 Personal Information Security Specification
- 2021 Regulations on the Management of Online Data Security (Draft)
For detailed information on XL Law Subscription content, click here or email subscriptions@xllawconsulting.com.