#Law Popularization Action #Personal Information Protection Act came into force today!
In recent years, spam text messages, harassing phone calls, big data killing, etc. have been criticized by the public, and the society has called for a severe crackdown on personal information leakage and the realization of "my information is my master", and the Personal Information Protection Law has been introduced as a special law to protect citizens' personal information. I think the law has several highlights worth noting:
First, say "no" to "big data killing": The law stipulates that personal information processors, that is, relevant business operators, cannot use their own information such as consumer economic conditions, consumption habits and price sensitivity to implement discriminatory differential treatment in terms of transaction prices and other aspects, nor can they carry out precision marketing through user profiles without obtaining consumer authorization.
II. Emphasize the protection of "sensitive personal information".
3. The principle of presumption of fault shall be adopted in the determination of tort liability.
When the rights and interests of personal information cause damages, and the personal information processor cannot prove that he is not at fault, he shall bear tort liability such as damages.
Another highlight of the law is the first "withdrawal of consent" system: if personal information is processed based on the consent of an individual, the individual has the right to withdraw his consent; the personal information processor should delete the personal information. This means that operators should pay more attention to the "minimum scope" of collecting personal information and managing the scope of use in a timely, refined, and classified manner; the public does not have to worry about a one-click "consent" becoming a permanent "consent" or unable to use the APP without signing an agreement.