China
carried out outside the territory of China under any of the following circumstances: (1)For the purpose of providing products or services to natural persons within China; (2)To analyze or evaluate the behavior of natural persons within China; (3)Other circumstances as stipulated by laws and administrative regulations.
(3) Personal information protection officer (PIPO): According to the PIPL and the national CAC’s Announcement on Submitting Personal Information Protection Officer Information, Personal Data Processors that process personal data of over 1 million individuals shall designate a PIPO. 4.2. Role and responsibilities of key stakeholders (1) Personal Data Processor: Under the PIPL, a Personal Data Processor shall follow requirements throughout the processing procedure of personal data, i.e., the collection, storage, use, processing,
Legislative Framework 4.1. Key stakeholders (1)
Personal Data Processor: According to the PIPL, it refers to an organization or individual that can make its own decision on the purpose, the means of processing, and other matters relating to the processing of personal data. A Personal Data Processor acts as the key stakeholder of personal data protection obligations and liabilities under the PIPL, and is similar to the concept of “controller” under the GDPR (while the concept of “entrusted processing party”, i.e., an individual or an organization being engaged or entrusted by other(s) to process personal data in accordance with its instructions, is similar to the concept “processor” under the GDPR). (2) Individual: An individual act as the personal data subject under the PIPL, and is entitled to a series of rights.
www.llinkslaw.com
Made with FlippingBook - PDF hosting