In a recent video, Hunton & Williams LLP’s partner Manuel (“Bing”) Maisog discusses the Standardization Administration of China’s recent specifications for security standards in China. The specifications will come into effect on May 1, 2018, and will act as a best practices guide for the collection and use of personal information. The specifications reiterate the applicability of the principles of legitimacy and minimization, and the obligation to obtain the consent of a data subject when collecting personal information, as well as the requirement to formulate and publish a privacy policy. Bing provides an overview of the specifications, and also suggests that because the specifications are more straightforward and easy to understand than other proposed compulsory elements of China’s cybersecurity framework, getting a working grasp of what the new specifications require may be the most logical and appropriate starting point in the process of coming into compliance with security requirements in China.

View Bing’s video on the security standards in China.