China Tightens its Grip on Unauthorized Personal Data Collection

China launched an initiative aimed at combating the unauthorized collection and misuse of personal data, targeting various sectors and technologies.

China aims to strengthen privacy law enforcement

China leads a joint operation to strengthen the enforcement of privacy laws. The initiative, led by China’s Cyberspace Administration (CAC), aided by the Ministry of Industry and Information Technology, State Administration for Market Regulation and the Ministry of Public Security, aims to curb the violation of existing privacy laws by targeting six key focus areas.

Crackdown targets six focus areas

The initiative has six focus areas in its crosshairs, namely:

• Apps and mini-apps: Authorities are scrutinizing apps embedded within social media platforms that may fail to inform users about data collection practices, unnecessarily request access to personal data such as media files or contacts, and lack options for users to opt out or lodge complaints.
• Software Development Kits (SDKs): The initiative aims at SDKs that lack features enabling developers to implement privacy protections within their applications.
• Smart home products and wearables: Aimed to counter manufacturers of these devices that fail to inform users about the types and purposes of data collected by their products.
• Facial recognition technology: The initiative addresses the illegal use of facial recognition in public spaces, particularly when data is being collected without consent, appropriate notifications or sufficient protection of biometric information. Recent regulations emphasize that individuals should not be coerced to use facial recognition to verify their identity and that alternative options should be provided.
• Offline data collection practices: The campaign targets the collection of personal information during activities such as QR code scanning when ordering food, making payments in retail stores or when businesses mandate the provision of birthdates, phone numbers, and other personal details without clear justification.
• Various service providers: Sectors including transportation, education, recruitment, healthcare and accommodation are being scrutinized for the unauthorized collection of personal data.

Government entities omitted from initiative

Interestingly, while China has embarked on an ambitious campaign to tighten privacy enforcement, significantly increasing scrutiny on the private sector's handling of personal data, it has notably bypassed government agencies in its latest initiative.

The authorities appear steadfast in demanding transparency and compliance from companies across various industries, yet they have conveniently sidestepped the pervasive surveillance conducted by government entities.

State agencies in China, widely known for employing extensive monitoring systems, such as widespread facial recognition in public spaces and sophisticated online surveillance, remain conspicuously absent from these targeted crackdowns.

Protecting your digital privacy

While it’s virtually impossible to fully cloak your personal data from surveillance, especially in places with intensive monitoring practices, you can significantly enhance the privacy of your online activities with a trustworthy VPN.

Solutions like Bitdefender VPN encrypt your internet connection, hiding your online whereabouts from prying eyes, including malicious actors, internet service providers and even certain government agencies.

Although a VPN won't protect all personal data, especially offline or information willingly shared through apps and platforms, it provides a critical layer of defense by safeguarding browsing habits, location data, and sensitive communications from intrusive tracking.