PIPL Articles 13, 14 and 23: consent is the main basis, a changed purpose needs fresh consent, and giving data to another handler needs separate consent (Personal Information Protection Law of the PRC (adopted 20 Aug. 2021, in force 1 Nov. 2021; Chinese text published by the Cyberspace Administration of China), Arts. 13(1)1, 14(2) and 23)
Translation: a personal information handler may process personal information only on one of the listed grounds, the first being the individual's consent; if the purpose, method or type of information changes, consent must be obtained again; and a handler that gives personal information it processes to another handler must tell the individual the recipient's name and contact details, the purpose, the method and the types of information, and obtain the individual's separate consent. The other listed grounds (contract necessity, legal duty, emergencies, news reporting, already-public information, other laws) do not include legitimate interests or commercial licensing, so a licence of customer or staff records to an AI buyer needs separate consent.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
“符合下列情形之一的，个人信息处理者方可处理个人信息： （一）取得个人的同意； ... 个人信息的处理目的、处理方式和处理的个人信息种类发生变更的，应当重新取得个人同意。 ... 个人信息处理者向其他个人信息处理者提供其处理的个人信息的，应当向个人告知接收方的名称或者姓名、联系方式、处理目的、处理方式和个人信息的种类，并取得个人的单独同意。”
- PIPL Articles 38, 39 and 41: sending personal information abroad needs a security assessment, certification or standard contract, plus separate consent, and foreign authorities cannot be given it without approval (Personal Information Protection Law of the PRC (adopted 20 Aug. 2021, in force 1 Nov. 2021; Chinese text published by the Cyberspace Administration of China), Arts. 38(1), 39 and 41)
- PIPL Articles 4 and 73: anonymised information is not personal information, but de-identified information is (Personal Information Protection Law of the PRC (adopted 20 Aug. 2021, in force 1 Nov. 2021; Chinese text published by the Cyberspace Administration of China), Art. 4(1) and Art. 73(3) and (4))
It is shown on its own, not counted into a figure.
Cited in this guide