In January 2018, China released the long-awaited national standard on personal information, titled the Personal Information Security Specification. This standard governs the collection, storage, usage, transfer and disclosure of personal data. To date, it remains the only finalised series of guidelines on implementing the personal data protection requirements laid down in the Cybersecurity Law. Since these standards have been released, a clear trend of tightened enforcement has been observed with companies being fined and ordered to correct their existing procedures.
Since releasing this standard, it has become clearer from a regulatory perspective, what companies should expect regarding data protection in China. In practice, many still wonder what these data protection obligations mean. This workshop is designed to give companies a deeper understanding of these regulations and incorporate them into their daily operations.
Taking into account actual examples from human resources, sales and marketing, the presenter will clarify:
- in which cases it is necessary to collect user consent;
- how to obtain consent;
- how to formulate internal policies for data collection and usage;
- how to formulate privacy policies; and
- how to integrate third-party services that can access collected data.
This workshop will also explore the main differences between the European General Data Protection Regulation and the Personal Information Security Specification. It is imperative to understand both sets of regulations in order for European businesses to assess when they need to pay attention to unique Chinese requirements when it comes to data protection.
Agenda
15:00-15:30 Registration
15:30-16:30 Presentation on Personal Information Security Specification Obligations
16:30-17:00 Q&A and discussion
Terms & Conditions
Events have limited seating so to ensure your attendance we encourage advance online registration and payment for all events. We cannot guarantee entry to anyone not registered in advance.
Our events are held in English and follow the Chatham House Rule unless otherwise stated. Post event sharing of presentation materials is at the speaker's discretion.
Cancellation Policy
If you cannot attend an event for which you have registered, please cancel your registration no later than one business day prior to the event. If you fail to notify us of your cancellation in a timely fashion, you will be charged for event costs.
To cancel you can: 1) email qlzhu@europeanchamber.com.cn, or 2) cancel online if you registered for the event through the website.