To address the risk of personal data leakage, in 2021, China issued a series of laws, regulations and national standards on personal data: the Data Security Law and the Personal Information Protection Law (“PIPL”).
The PIPL enshrines the sensitive data status of health data and sets certain requirements for the processing of sensitive data, but without going into detail.
The National Standard “Information Security Technology-Guide for Health Data Security” (GB / T 39725-2020), which came into effect in July 2021, specifies these requirements.
