Article 28 – Sensitive Personal Information

“Sensitive personal information” is personal information that once leaked or illegally used, may easily lead to the infringement of the personal dignity of a natural person or may endanger his personal safety or property, including information such as biometrics, religious belief, specific identity, medical health status, financial accounts, and the person’s whereabouts, as well as the personal information of a minor under the age of 14 years.

Personal information handlers can handle sensitive personal information only when there is a specific purpose and when it is of necessity, under the circumstance where strict protective measures are taken.

Related provisions:

Relevant PIPL Compliance Documents
(Subscription Services Required)

For detailed information on XL Law Subscription content, click here or email