What does the personal information protection impact assessment include?

According to relevant data, meeting the specific service needs of personal information subjects does not belong to the impact assessment of personal information protection. The contents of personal information protection impact assessment include: whether the purpose and method of personal information processing are legal, fair and necessary; Impact on personal rights and security risks; Whether the protective measures taken are legal, effective and appropriate to the degree of risk. Therefore, meeting the specific service needs of personal information subjects does not belong to personal information protection impact assessment.

Legal basis: Article 1035 of the Civil Code of People's Republic of China (PRC) shall follow the principles of legality, justness and necessity, and shall not handle personal information excessively, and meet the following conditions: (1) obtain the consent of the natural person or his guardian, unless otherwise stipulated by laws and administrative regulations; (2) Rules for publicly handling information; (3) Clearly explain the purpose, mode and scope of information processing; (four) does not violate the provisions of laws and administrative regulations and the agreement between the two parties. The processing of personal information includes the collection, storage, use, processing, transmission, provision and disclosure of personal information.

Please click to enter the picture description (maximum 18 words).