In any of the following circumstances, a personal information handler shall assess in advance the impact on personal information protection and keep a record of the course of the handling:
- handling sensitive personal information;
- using personal information to conduct automated decision making;
- entrusting personal information handling to another party, providing personal information for another party, or publicizing personal information;
- providing personal information for any party outside the territory of the People’s Republic of China; or
- conducting other personal information handling activities which may have significant impacts on individuals.
Related provisions:
- Contents of information protection impact assessments
- “Sensitive Personal Information” defined
- “Automated decision making” defined
- Entrusting handling to another party
- Providing personal information for another party
- Publicizing personal information
- Providing personal information for a party outside China
Relevant PIPL Compliance Documents
(Subscription Services Required)
For detailed information on XL Law Subscription content, click here or email subscriptions@xllawconsulting.com.