China Justice Observer

中司观察

EnglishArabicChinese (Simplified)DutchFrenchGermanHindiItalianJapaneseKoreanPortugueseRussianSpanishSwedishHebrewIndonesianVietnameseThaiTurkishMalay

China to Regulate Automotive Data Security

Wed, 22 Sep 2021
Categories: China Legal Trends

In August 2021, the Cyberspace Administration of China, the National Development and Reform Commission, the Ministry of Industry and Information Technology, the Ministry of Public Security, and the Ministry of Transport jointly issued the “Provisions on the Administration of Automotive Data Security (for Trial Implementation)” (hereinafter “the Provisions”, 汽车数据安全管理若干规定(试行)). The Provisions will come into force on 1 Oct. 2021.

The Provisions is aimed at regulating automotive data processing activities, protecting the legitimate rights and interests of individuals and organizations, safeguarding national security and social public interests, and promoting the reasonable development and utilization of automotive data as well.

The Provisions clarifies the following requirements for the processing of personal information: (1) Notification obligation. The automotive data processor, when processing personal information, shall inform the individuals of the type of personal information to be processed, the scenario for collection, the methods for ceasing the information collection, and other relevant information. (2) The obligation to obtain consent. The automotive data processor shall obtain the consent of the individual or be in line with other circumstances in accordance with laws and administrative regulations. (3) Anonymity requirement. Where the personal information collected is provided to others without the individual's consent for guaranteeing driving safety, the personal information that has been collected shall be anonymized.

In view of sensitive personal information, on the basis of performing the obligations of notification and obtaining the individual's separate consent, the automotive data processor shall also meet the specific requirements to define the purpose of processing, remind the individual of the collection status, and facilitate the individual to terminate the collection. In terms of biometric information such as fingerprints, voiceprints, facial information, and heart rhythms, no automotive data processor may collect such information only if it is deemed necessary to do so to enhance driving safety.

 

 

Cover Photo by Joshua Fernandez (https://unsplash.com/@joshuafernandez) on Unsplash

Contributors: CJO Staff Contributors Team

Save as PDF

Related laws on China Laws Portal

You might also like

Beijing Passes Autonomous Vehicle Regulation

In December 2024, Beijing passed the "Beijing Autonomous Vehicle Regulation," effective April 1, 2025, to promote development and safety, allowing self-driving cars in taxis, buses, and more after rigorous testing.

SPC Revises Rules on Mainland China - Taiwan Judgment Recognition

China’s Supreme People’s Court (SPC) has amended regulations on the mutual recognition and enforcement of civil judgments between Mainland China and Taiwan, clarifying application procedures, exceptions, and jurisdictional conflicts, effective January 1, 2025.

China Establishes Shanghai International Commercial Court

The Shanghai International Commercial Court was established in December 2024 as a division of the Shanghai First Intermediate People’s Court, with exclusive jurisdiction over foreign-related commercial cases and arbitration judicial review, along with newly released jurisdictional regulations and model clauses.

SPC Issues Guiding Cases on Gig Worker Protection

In December 2024, China’s Supreme People’s Court issued its first guiding cases on gig worker labor disputes, clarifying criteria for determining employment relationships with platform companies.

China Amends Supervision Law to Strengthen Oversight

The newly amended Supervision Law of the People’s Republic of China, effective June 1, 2025, strengthens oversight, limits supervisory powers, and enhances protections for citizens' rights through standardized enforcement.