China Mirrors International Counterparts With New App Privacy Requirements
China's new app privacy guidelines echoes rights found in the EU's GDPR and California's CCPA.
January 06, 2020 at 01:00 PM
3 minute read
Before 2019 came to a close, the Chinese government added another requirement to tech's growing compliance obligations. On Dec. 31, the country issued new guidelines requiring app makers to obtain users' permission and clearly notify app users before collecting their data.
The new standard provides public notice to internet users and app operators of what the Chinese government considers a compliance violation, and it clarifies implementation of China's Cybersecurity Law (CSL), according to a translation of the new requirements from China Law Translate.
The CSL went into effect in 2017 and requires broadly defined "network operators" and other entities to adhere to specific data storage, cybersecurity and data transfer standards. While the law's jurisdiction only applies to companies based in a Chinese territory, lawyers have said the CSL still lacks clarity over its scope. The newest app guidelines, which are also limited to companies based in Chinese territory, should provide some insight for China-based companies leveraging or developing apps that collect local citizens' personal information.
The guideline orders app operators to clearly specify what private information will be collected about an app user. App operators must also inform users how and why it will collect or use the information, especially when collecting ID numbers, bank account numbers, location tracking and other sensitive information.
For app developers or companies leveraging apps, China's requirements are new but not unique, said solo practitioner Zachary Strebeck, who largely represents video game developers.
"I think if you have a global perspective for your game or app, I think it will have an impact," he said. "But I think if you're complying with other laws, you will be 90% there."
He noted the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) both include protection and disclosure requirements, which China's new app standards also require. "As long as you are disclosing [what and how information is being collected], that's generally what they want."
Although China's latest guideline doesn't regulate all electronic data, unlike the GDPR and CCPA, it echoes a growing call by regulators to force corporations to enact and follow a privacy policy and provide transparency to users.
Plus, a focus on smartphone apps could be useful. According to the South China Morning Post, more than 80% of China's internet users experienced data breaches in 2018, while more than one-third of apps in China are prone to data safety risk.
To be sure, a data privacy law from Chinese regulators is on the horizon. State-run chinadaily.com noted this latest guideline is an effort to assist law enforcement in detecting and combating privacy-related violations as lawmakers draft the country's first personal information protection law.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllTrending Stories
Who Got The Work
J. Brugh Lower of Gibbons has entered an appearance for industrial equipment supplier Devco Corporation in a pending trademark infringement lawsuit. The suit, accusing the defendant of selling knock-off Graco products, was filed Dec. 18 in New Jersey District Court by Rivkin Radler on behalf of Graco Inc. and Graco Minnesota. The case, assigned to U.S. District Judge Zahid N. Quraishi, is 3:24-cv-11294, Graco Inc. et al v. Devco Corporation.
Who Got The Work
Rebecca Maller-Stein and Kent A. Yalowitz of Arnold & Porter Kaye Scholer have entered their appearances for Hanaco Venture Capital and its executives, Lior Prosor and David Frankel, in a pending securities lawsuit. The action, filed on Dec. 24 in New York Southern District Court by Zell, Aron & Co. on behalf of Goldeneye Advisors, accuses the defendants of negligently and fraudulently managing the plaintiff's $1 million investment. The case, assigned to U.S. District Judge Vernon S. Broderick, is 1:24-cv-09918, Goldeneye Advisors, LLC v. Hanaco Venture Capital, Ltd. et al.
Who Got The Work
Attorneys from A&O Shearman has stepped in as defense counsel for Toronto-Dominion Bank and other defendants in a pending securities class action. The suit, filed Dec. 11 in New York Southern District Court by Bleichmar Fonti & Auld, accuses the defendants of concealing the bank's 'pervasive' deficiencies in regards to its compliance with the Bank Secrecy Act and the quality of its anti-money laundering controls. The case, assigned to U.S. District Judge Arun Subramanian, is 1:24-cv-09445, Gonzalez v. The Toronto-Dominion Bank et al.
Who Got The Work
Crown Castle International, a Pennsylvania company providing shared communications infrastructure, has turned to Luke D. Wolf of Gordon Rees Scully Mansukhani to fend off a pending breach-of-contract lawsuit. The court action, filed Nov. 25 in Michigan Eastern District Court by Hooper Hathaway PC on behalf of The Town Residences LLC, accuses Crown Castle of failing to transfer approximately $30,000 in utility payments from T-Mobile in breach of a roof-top lease and assignment agreement. The case, assigned to U.S. District Judge Susan K. Declercq, is 2:24-cv-13131, The Town Residences LLC v. T-Mobile US, Inc. et al.
Who Got The Work
Wilfred P. Coronato and Daniel M. Schwartz of McCarter & English have stepped in as defense counsel to Electrolux Home Products Inc. in a pending product liability lawsuit. The court action, filed Nov. 26 in New York Eastern District Court by Poulos Lopiccolo PC and Nagel Rice LLP on behalf of David Stern, alleges that the defendant's refrigerators’ drawers and shelving repeatedly break and fall apart within months after purchase. The case, assigned to U.S. District Judge Joan M. Azrack, is 2:24-cv-08204, Stern v. Electrolux Home Products, Inc.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250