Does People's Republic of China (PRC) (China) Personal Information Protection Law include anonymous information?

The personal information protection law of People's Republic of China (PRC) (PRC) does not include anonymized information, but anonymization needs to comply with the law to ensure that information cannot be recovered and associated with a specific individual.

According to the Law of People's Republic of China (PRC) on the Protection of Personal Information, personal information refers to all kinds of information recorded by electronic or other means, which can identify the identity of a specific natural person alone or in combination with other information. Personal information includes but is not limited to personal identity-related information such as name, date of birth, ID number, address, telephone number and bank account number.

Anonymization refers to the processing of personal information, so that the processed information cannot identify the identity of a specific natural person and cannot be recovered. Anonymous information can no longer be associated with a specific individual, so it is no longer regarded as personal information.

According to the above explanation, the personal information protection law of People's Republic of China (PRC) (China) includes the protection of personal information, but does not include anonymous information. Anonymous information can no longer identify the identity of a specific natural person, so it is no longer bound by the Personal Information Protection Law.

However, it should be noted that the process of anonymization needs to ensure that the processed information cannot be restored and cannot be associated with a specific individual in other ways. If anonymous processing does not comply with the law or the processed information can be recovered, it may still constitute personal information and need to be protected according to law.

In a word, the personal information protection law of People's Republic of China (PRC) (China) does not include anonymous information, but anonymity needs to comply with the law to ensure that information cannot be recovered and associated with a specific individual.

The Personal Information Protection Law provides protection measures for anonymous data. According to this law, anonymous data is no longer regarded as personal information, because the identity of a specific individual cannot be identified. However, the law still requires the protection of anonymous data to prevent individuals from being re-identified. Specific measures include encryption, secure storage and access control to ensure the security and confidentiality of anonymous data. In addition, the Law on the Protection of Personal Information also stipulates restrictions on the use of anonymous data, which is prohibited from being used for illegal crimes, infringement of the rights and interests of others and other purposes. To sum up, the Personal Information Protection Law provides clear protection requirements and measures for anonymous data to balance the relationship between personal privacy and data utilization.

Legal basis:

People's Republic of China (PRC) (China) Personal Information Protection Law:

Chapter II Rules for Handling Personal Information

Section 1 General Provisions

Article 19 Unless otherwise provided by laws and administrative regulations, the retention period of personal information shall be the shortest time necessary to achieve the purpose of processing.