China is moving fast building up its data regulation regime. In June of 2017, China’s Cybersecurity Law came into force, the first national-level and cross-sector legislation in China to protect personal information. Since 2017, China also has launched a pragmatic guidance Information Security Technology – Personal Information Security Specification (“Specification”) and the...
What I learned last week at HKS’ Public Interest Tech Summit
Last week I spent a few days at Harvard Kennedy School for the Public Interest Tech Summit, where I joined dozens of tech fellows and scholars from various backgrounds to explore and discuss around the concept of “public interest technology.” If you are interested, you can click here to watch the video recording of the opening session. A couple of ideas and inspirations I would like...
A Comparison of “Consent” in GDPR and China’s Rules
Both China and the European Union take “consent” an important element in protecting personal information. Under the GDPR, consent is one required legal base – among others – to process personal information. China’s Cybersecurity Law, which is currently the overarching law in this field in China, requires network operators to obtain user consent before collecting and using their personal...