“Sensitive personal information” is personal information that once leaked or illegally used, may easily lead to the infringement of the personal dignity of a natural person or may endanger his personal safety or property, including information such as biometrics, religious belief, specific identity, medical health status, financial accounts, and the person’s whereabouts, as well as the personal information of a minor under the age of 14 years.
Personal information handlers can handle sensitive personal information only when there is a specific purpose and when it is of necessity, under the circumstance where strict protective measures are taken.
Related provisions:
- Consent for sensitive personal information handling
- Consent and rules for handling minors’ personal information
- Notice before handling sensitive personal information
- Impact assessment required for sensitive handling
- Relation to other laws restricting sensitive personal information handling
Relevant PIPL Compliance Documents
(Subscription Services Required)
For detailed information on XL Law Subscription content, click here or email subscriptions@xllawconsulting.com.