PIPL Articles 4 and 73: anonymised information is not personal information, but de-identified information is (Personal Information Protection Law of the PRC (adopted 20 Aug. 2021, in force 1 Nov. 2021; Chinese text published by the Cyberspace Administration of China), Art. 4(1) and Art. 73(3) and (4))
Translation: personal information does not include information that has been anonymised; de-identification means processing so that a person cannot be identified without additional information, and anonymisation means processing so that a specific person cannot be identified and the data cannot be restored. So pseudonymised or de-identified data is still personal information, and only irreversible anonymisation takes data outside the Law.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“个人信息是以电子或者其他方式记录的与已识别或者可识别的自然人有关的各种信息，不包括匿名化处理后的信息。 ... （三）去标识化，是指个人信息经过处理，使其在不借助额外信息的情况下无法识别特定自然人的过程。 （四）匿名化，是指个人信息经过处理无法识别特定自然人且不能复原的过程。”
Where it was read
Also read from the same source
- PIPL Articles 13, 14 and 23: consent is the main basis, a changed purpose needs fresh consent, and giving data to another handler needs separate consent (Personal Information Protection Law of the PRC (adopted 20 Aug. 2021, in force 1 Nov. 2021; Chinese text published by the Cyberspace Administration of China), Arts. 13(1)1, 14(2) and 23)
- PIPL Articles 38, 39 and 41: sending personal information abroad needs a security assessment, certification or standard contract, plus separate consent, and foreign authorities cannot be given it without approval (Personal Information Protection Law of the PRC (adopted 20 Aug. 2021, in force 1 Nov. 2021; Chinese text published by the Cyberspace Administration of China), Arts. 38(1), 39 and 41)
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide