Unlike the cyber security law, which focuses on the comprehensive management of cyberspace, the data security law, as the basic law in the data field, mainly focuses on data processing activities. The Law on the Protection of Personal Information puts a "legal security lock" on personal information from the perspective of personal information of natural persons, becoming the first law in China to specifically regulate the protection of personal information, which will have a direct and far-reaching impact on the protection of citizens' personal information rights and interests and the data privacy compliance of various organizations.
The full text of the Personal Information Protection Law officially passed consists of eight chapters and seventy-four articles. Focusing on the handling of personal information, corresponding rules are established from different angles, such as handling rules, cross-border provision, personal rights, obligations of processors, protection departments and legal responsibilities, and special handling rules for sensitive personal information and state organs are emphasized. Its starting point is to protect the right of personal information processing enjoyed by individuals, to clarify the rules and obligations that enterprises and other personal information processors should follow, and to clarify the legal responsibilities of illegal and infringing acts.