Provisions on Protecting the Personal Information of Telecommunications and Internet Users entered into force on 1 Sept. 2013.

The key points are as follows:

1.Service providers shall publish the rules on the collection and use of personal information.

2.Without the consent of users, service providers shall not collect users’ personal information, and they can only collect the information that is necessary for the provision of service.

3.Service providers shall prevent the leakage, damage, tampering or loss of users’ personal information.