China’s National Information Security Standardization Technical Committee is requesting comments on a draft cybersecurity national standard, the Information Security Technology Security Requirements for the Handling of Sensitive Personal Information. The draft defines categories of sensitive personal information, data identification and security requirements for processing, while noting the data should be processed for a specific purpose and with individual’s consent. The deadline for comments is 8 Oct.
Full story
