May 31, 2010
---------------------
Monday
>>>Welcome visitor, you're not logged in.
Login   Subscribe Now!
Home User Management About Us Chinese
  Bookmark   Download   Print
Search:  serch "Fabao" Window Font Size: Home PageHome PageHome Page
 
Request for Public Comments on the Personal Information Protection Law (Bill for Second Deliberation)
个人信息保护法(草案二次审议稿)征求意见
【法宝引证码】
  • Deadline for Comments: 05-28-2021
  • Level of Authority: Laws
 
  
Request for Public Comments on the Personal Information Protection Law (Bill for Second Deliberation)
(April 29, 2021)
Upon deliberation at the 28th session of the Standing Committee of the Thirteenth National People's Congress, the Personal Information Protection Law of the People's Republic of China (Bill for Second Deliberation) is hereby published on www.npc.gov.cn, and the public may directly log onto the website to post their comments or submit by mail their comments to the Legislative Affairs Commission under the Standing Committee of the National People's Congress (at 1 Qianmen West Avenue, Xicheng District, Beijing Municipality, postal code: 100805. Please indicate “Request for Public Comments on the Personal Information Protection Law (Bill for Second Deliberation)” on the envelope). Comments may be submitted until May 28, 2021.
Personal Information Protection Law of the People's Republic of China
(Bill for Second Deliberation)
 

个人信息保护法(草案二次审议稿)征求意见
(2021年4月29日)


第十三届全国人大常委会第二十八次会议对《中华人民共和国个人信息保护法(草案二次审议稿)》进行了审议。现将《中华人民共和国个人信息保护法(草案二次审议稿)》在中国人大网公布,社会公众可以直接登录中国人大网(www.npc.gov.cn)提出意见,也可以将意见寄送全国人大常委会法制工作委员会(北京市西城区前门西大街1号,邮编:100805。信封上请注明个人信息保护法草案二次审议稿征求意见)。征求意见截止日期:2021年5月28日。
中华人民共和国个人信息保护法(草案)
(二次审议稿)
Table of Contents
 目 录
Chapter I General Provisions
 第一章 总 则
Chapter II Personal Information Processing Rules
 第二章 个人信息处理规则
Section 1 General Rules
 第一节 一般规定
Section 2 Rules on Processing Sensitive Personal Information
 第二节 敏感个人信息的处理规则
Section 3 Specific Provisions on the Processing of Personal Information by State Organs
 第三节 国家机关处理个人信息的特别规定
Chapter III Rules on the Cross-Border Provision of Personal Information
 第三章 个人信息跨境提供的规则
Chapter IV Individuals' Rights in Personal Information Processing Activities
 第四章 个人在个人信息处理活动中的权利
Chapter V Obligations of Personal Information Processors
 第五章 个人信息处理者的义务
Chapter VI Departments Performing Personal Information Protection Functions
 第六章 履行个人信息保护职责的部门
Chapter VII Legal Liability
 第七章 法律责任
Chapter VIII Supplemental Provisions
 第八章 附 则
Chapter I General Provisions
 

第一章 总 则


Article 1 This Law is enacted for the purposes of protecting rights and interests relating to personal information, regulating personal information processing activities, and promoting the reasonable use of personal information.
   第一条 为了保护个人信息权益,规范个人信息处理活动,促进个人信息合理利用,制定本法。
Article 2 The personal information of natural persons shall be protected by law. No organization or individual may infringe upon natural persons' rights and interests relating to personal information.
   第二条 自然人的个人信息受法律保护,任何组织、个人不得侵害自然人的个人信息权益。
Article 3 This Law shall apply to organizations and individuals' processing, within the territory of the People's Republic of China, of the personal information of natural persons.
This Law shall also apply to the processing outside the territory of the People's Republic of China of the personal information of natural persons within the territory of the People's Republic of China if the information is processed:
   第三条 组织、个人在中华人民共和国境内处理自然人个人信息的活动,适用本法。
在中华人民共和国境外处理中华人民共和国境内自然人个人信息的活动,有下列情形之一的,也适用本法:
(1) for the purpose of providing products or services to natural persons inside China;
 (一)以向境内自然人提供产品或者服务为目的;
(2) to analyze or assess the conduct of natural persons inside China; or
 (二)分析、评估境内自然人的行为;
(3) under any other circumstance as provided by any law or administrative regulation.
 (三)法律、行政法规规定的其他情形。
Article 4 “Personal information” means all kinds of information relating to identified or identifiable natural persons recorded by electronic or other means, excluding anonymized information.
Personal information processing includes personal information collection, storage, use, processing, transmission, provision, and disclosure, among others.
   第四条 个人信息是以电子或者其他方式记录的与已识别或者可识别的自然人有关的各种信息,不包括匿名化处理后的信息。
个人信息的处理包括个人信息的收集、存储、使用、加工、传输、提供、公开等。
Article 5 Personal information shall be processed in a lawful and proper manner and under the principle of good faith, and may not be processed by misleading, fraud, coercion or other means.
   第五条 处理个人信息应当采用合法、正当的方式,遵循诚信原则,不得通过误导、欺诈、胁迫等方式处理个人信息。
Article 6 Personal information shall be processed for a clear and reasonable purpose within the smallest scope required for achieving the processing purpose, and in the manners that have the minimum impacts on the rights and interests of individuals. It is prohibited to conduct personal information processing unrelated to the processing purpose.
   第六条 处理个人信息应当具有明确、合理的目的,并应当限于实现处理目的所必要的最小范围、采取对个人权益影响最小的方式,不得进行与处理目的无关的个人信息处理。
Article 7 The principles of openness and transparency shall be observed in the processing of personal information, the rules for the processing of personal information shall be disclosed to the public, and the purposes, methods, and scope of information processing shall be explicitly indicated.
   第七条 处理个人信息应当遵循公开、透明的原则,公开个人信息处理规则,明示处理的目的、方式和范围。
Article 8 The quality of personal information shall be guaranteed in the processing of personal information to avoid adverse impacts on the rights and interests of individuals caused by inaccurate and incomplete personal information.
   第八条 处理个人信息应当保证个人信息的质量,避免因个人信息不准确、不完整对个人权益造成不利影响。
Article 9 Personal information processors shall be responsible for their personal information processing activities, and take necessary measures to guarantee the security of the personal information they process.
   第九条 个人信息处理者应当对其个人信息处理活动负责,并采取必要措施保障所处理的个人信息的安全。
Article 10 No organization or individual may process personal information in violation of the provisions of laws and administrative regulations, or engage in personal information processing activities compromising national security or public interests.
   第十条 任何组织、个人不得违反法律、行政法规的规定处理个人信息,不得从事危害国家安全、公共利益的个人信息处理活动。
Article 11 The state shall establish and improve the personal information protection system to prevent and severely punish infringements of rights and interests relating to personal information, strengthen publicity and education on personal information protection, and promote the formation of a good environment for the joint participation in personal information protection by the government, enterprises, relevant industry organizations, and the general public.
   第十一条 国家建立健全个人信息保护制度,预防和惩治侵害个人信息权益的行为,加强个人信息保护宣传教育,推动形成政府、企业、相关行业组织、社会公众共同参与个人信息保护的良好环境。
Article 12 The state shall vigorously participate in the development of international rules on personal information protection, boost international exchange and cooperation in terms of personal information protection, and promote the mutual recognition of personal information protection rules and standards, among others, between China and other countries, regions, and international organizations.
   第十二条 国家积极参与个人信息保护国际规则的制定,促进个人信息保护方面的国际交流与合作,推动与其他国家、地区、国际组织之间的个人信息保护规则、标准等的互认。
Chapter II Personal Information Processing Rules
 

第二章 个人信息处理规则


Section 1 General Rules
 

第一节 一般规定


Article 13 A personal information processor may not process personal information unless:
   第十三条 符合下列情形之一的,个人信息处理者方可处理个人信息:
(1) the individual's consent has been obtained;
 (一)取得个人的同意;
(2) the processing is necessary for the conclusion or performance of a contract to which the individual is a party;
 (二)为订立或者履行个人作为一方当事人的合同所必需;
(3) the processing is necessary to fulfill statutory duties and statutory obligations;
 (三)为履行法定职责或者法定义务所必需;
(4) the processing is necessary to respond to public health emergencies or protect natural persons' life, health and property safety under emergency circumstances;
 (四)为应对突发公共卫生事件,或者紧急情况下为保护自然人的生命健康和财产安全所必需;
(5) the personal information that has been made public is processed within a reasonable scope in accordance with this Law;
 (五)依照本法规定在合理的范围内处理已公开的个人信息;
(6) personal information is processed within a reasonable scope to conduct news reporting, public opinion-based supervision, and other activities in the public interest; or
 (六)为公共利益实施新闻报道、舆论监督等行为,在合理的范围内处理个人信息;
(7) under any other circumstance as provided by any law or regulation.
In accordance with other relevant provisions of this Law, an individual's consent shall be obtained before processing his or her personal information, except under the circumstances specified in subparagraphs (2) to (7) of the preceding paragraph.
 (七)法律、行政法规规定的其他情形。
依照本法其他有关规定,处理个人信息应当取得个人同意,但有前款第二项至第七项规定情形的,不需取得个人同意。
Article 14 Consent to the processing of personal information shall be expressed by individuals voluntarily and explicitly on the premise of being fully informed. Where any law or administrative regulation provides that the individual's separate consent or written consent shall be obtained for processing personal information, such provision shall prevail.
In the case of any change of the purpose of the processing of personal information, the processing method, or the category of processed personal information, the individual's consent shall be obtained again.
   第十四条 处理个人信息的同意,应当由个人在充分知情的前提下自愿、明确作出。法律、行政法规规定处理个人信息应当取得个人单独同意或者书面同意的,从其规定。
个人信息的处理目的、处理方式和处理的个人信息种类发生变更的,应当重新取得个人同意。
Article 15 Where a personal information processor processes the personal information of a minor under the age of fourteen, it or he shall obtain the consent of the minor's parents or other guardians.
   第十五条 个人信息处理者处理不满十四周岁未成年人个人信息的,应当取得未成年人的父母或者其他监护人的同意。
Article 16 An individual shall have the right to withdraw his or her consent to personal information processing activities conducted on the basis of his or her consent. The personal information processor shall provide convenient ways to withdraw the consent.
The individual's withdrawal of his or her consent does not affect the effectiveness of personal information processing activities that have been conducted based on his or her consent before the withdrawal of such consent.
   第十六条 基于个人同意而进行的个人信息处理活动,个人有权撤回其同意。个人信息处理者应当提供便捷的撤回同意的方式。
个人撤回同意,不影响撤回前基于个人同意已进行的个人信息处理活动的效力。
Article 17 A personal information processor may not refuse to provide products or services on the ground that the relevant individual does not consent to the processing of his or her personal information or withdraws consent to the processing of his or her personal information, except that the processing of personal information is necessary for the provision of products or services.
   第十七条 个人信息处理者不得以个人不同意处理其个人信息或者撤回其对个人信息处理的同意为由,拒绝提供产品或者服务;处理个人信息属于提供产品或者服务所必需的除外。
Article 18 A personal information processor shall, before processing personal information, notify individuals of the following matters in a conspicuous manner, using clear and easily understood language:
   第十八条 个人信息处理者在处理个人信息前,应当以显著方式、清晰易懂的语言向个人告知下列事项:
(1) The identity and contact information of the personal information processor.
 (一)个人信息处理者的身份和联系方式;
(2) Purposes of the processing of personal information, processing methods, categories of the processed personal information, and the preservation periods.
 (二)个人信息的处理目的、处理方式,处理的个人信息种类、保存期限;
(3) Methods and procedures for individuals to exercise the rights provided in this Law.
 (三)个人行使本法规定权利的方式和程序;
(4) Other matters that should be notified as provided by laws and administrative regulations.
Where any matter as set forth in the preceding paragraph changes, the individual shall be notified of the change.
Where the personal information processor notifies the matters as set forth in paragraph 1 in the method of developing personal information processing rules, the processing rules shall be disclosed to the public and easy to consult and preserve.
 (四)法律、行政法规规定应当告知的其他事项。
前款规定事项发生变更的,应当将变更部分告知个人。
个人信息处理者通过制定个人信息处理规则的方式告知第一款规定事项的,处理规则应当公开,并且便于查阅和保存。
Article 19 Personal information processors processing personal information are permitted not to notify individuals of the matters as set forth in the preceding article if laws or administrative regulations provide that such processing shall be kept confidential or notification is not necessary.
Where it is impossible to notify individuals in a timely manner for the protection of natural persons' life, health and property safety under emergency circumstances, personal information processors shall notify them in a timely manner after the elimination of the emergency circumstances.
   第十九条 个人信息处理者处理个人信息,有法律、行政法规规定应当保密或者不需要告知的情形的,可以不向个人告知前条规定的事项。
紧急情况下为保护自然人的生命健康和财产安全无法及时向个人告知的,个人信息处理者应当在紧急情况消除后及时告知。
Article 20 A preservation period of personal information shall be the shortest time necessary to achieve the processing purpose. Where any law or administrative regulation provides otherwise for a preservation period of personal information, such provision shall prevail.
   第二十条 个人信息的保存期限应当为实现处理目的所必要的最短时间。法律、行政法规对个人信息的保存期限另有规定的,从其规定。
Article 21 Where two or more personal information processors jointly decide on the purposes of the processing of personal information and processing methods, they shall agree on their respective rights and obligations. However, such agreement does not affect an individual's request for exercising his or her rights as provided in this Law filed with any of the said personal information processors.
Where personal information processors jointly processing personal information infringe the rights and interests relating to personal information, they shall bear joint and several liability.
   第二十一条 两个以上的个人信息处理者共同决定个人信息的处理目的和处理方式的,应当约定各自的权利和义务。但是,该约定不影响个人向其中任何一个个人信息处理者要求行使本法规定的权利。
个人信息处理者共同处理个人信息,侵害个人信息权益的,应当承担连带责任。
Article 22 A personal information processor entrusting the processing of personal information shall agree with the entrusted party on the purposes and period of the entrusted processing, processing methods, categories of personal information, protection measures, as well as the rights and obligations of both parties, among others, and conduct supervision of the personal information processing activities of the entrusted party.
The entrusted party shall process personal information as agreed, and may not process personal information beyond the agreed processing purposes or processing methods, among others. Where the entrustment contract has not taken effect or is null and void, revoked, or rescinded, the entrusted party shall return personal information to the personal information processor or delete it, and shall not retain such information.
Without the consent of the personal information processor, the entrusted party may not sub-entrust the processing of personal information to any other party.
   第二十二条 个人信息处理者委托处理个人信息的,应当与受托方约定委托处理的目的、期限、处理方式、个人信息的种类、保护措施以及双方的权利和义务等,并对受托方的个人信息处理活动进行监督。
受托方应当按照约定处理个人信息,不得超出约定的处理目的、处理方式等处理个人信息;委托合同不生效、无效、被撤销或者终止的,受托方应当将个人信息返还个人信息处理者或者予以删除,不得保留。
未经个人信息处理者同意,受托方不得转委托他人处理个人信息。
Article 23 Where a personal information processor needs to transfer personal information due to combination or division, among others, it or he shall inform individuals of the identity and contact information of the recipient. The recipient shall continue to perform the obligations of the personal information processor. If the recipient changes the original processing purposes or processing methods, it or he shall obtain the individuals' consent again in accordance with this Law.
   第二十三条 个人信息处理者因合并、分立等原因需要转移个人信息的,应当向个人告知接收方的身份、联系方式。接收方应当继续履行个人信息处理者的义务。接收方变更原先的处理目的、处理方式,应当依照本法规定重新取得个人同意。
Article 24 A personal information processor that provides any other person with the personal information it or he processes shall notify individuals of the recipient's identity, contact information, processing purposes, processing methods, and categories of personal information, and obtain the individuals' separate consent. The recipient shall process personal information within the scope of the aforementioned processing purposes, processing methods, and categories of personal information, among others. Where the recipient changes the original processing purposes or processing methods, it or he shall obtain individuals' consent again in accordance with this Law.
   第二十四条 个人信息处理者向他人提供其处理的个人信息的,应当向个人告知接收方的身份、联系方式、处理目的、处理方式和个人信息的种类,并取得个人的单独同意。接收方应当在上述处理目的、处理方式和个人信息的种类等范围内处理个人信息。接收方变更原先的处理目的、处理方式的,应当依照本法规定重新取得个人同意。
Article 25 When automated decision making is conducted by using personal information, the transparency of the decision making and the fairness and reasonability of the result shall be guaranteed.
......
   第二十五条 利用个人信息进行自动化决策,应当保证决策的透明度和结果公平合理。
通过自动化决策方式进行商业营销、信息推送,应当同时提供不针对其个人特征的选项,或者向个人提供拒绝的方式。
......



Dear visitor,you are attempting to view a subscription-based section of lawinfochina.com. If you are already a subscriber, please login to enjoy access to our databases . If you are not a subscriber, please subscribe . Should you have any questions, please contact us at:
+86 (10) 8268-9699 or +86 (10) 8266-8266 (ext. 153)
Mobile: +86 133-1157-0713
Fax: +86 (10) 8266-8268
database@chinalawinfo.com


 


您好:您现在要进入的是北大法律英文网会员专区,如您是我们英文用户可直接 登录,进入会员专区查询您所需要的信息;如您还不是我们 的英文用户,请注册并交纳相应费用成为我们的英文会员 。如有问题请来电咨询;
Tel: +86 (10) 82689699, +86 (10) 82668266 ext. 153
Mobile: +86 13311570713
Fax: +86 (10) 82668268
E-mail: database@chinalawinfo.com


     
     
【法宝引证码】        北大法宝www.lawinfochina.com
Message: Please kindly comment on the present translation.
Confirmation Code:
Click image to reset code!
 
  Translations are by lawinfochina.com, and we retain exclusive copyright over content found on our website except for content we publish as authorized by respective copyright owners or content that is publicly available from government sources.

Due to differences in language, legal systems, and culture, English translations of Chinese law are for reference purposes only. Please use the official Chinese-language versions as the final authority. lawinfochina.com and its staff will not be directly or indirectly liable for use of materials found on this website.

We welcome your comments and suggestions, which assist us in continuing to improve the quality of our materials.
 
Home | Products and Services | FAQ | Disclaimer | Chinese | Site Map
©2012 Chinalawinfo Co., Ltd.    database@chinalawinfo.com  Tel: +86 (10) 8268-9699  京ICP证010230-8