CAC publishes simplified personal information protection measures for small processors

Original title: 小型个人信息处理者个人信息保护简化措施规定

The Cyberspace Administration of China (CAC) has published a regulation introducing simplified personal information protection measures specifically designed for small personal information processors. These tailored measures aim to reduce compliance burden while maintaining data protection standards for smaller operators in China's data protection framework.

What changed

• CAC introduces a new regulatory framework specifically for small personal information processors, creating tailored compliance requirements distinct from those applying to larger processors

Who is affected

Small personal information processors and handlers in China operating at smaller scale, across all sectors and industries that process personal data

Summary generated by a language model; the official text prevails. Not legal advice.