USITO Call for Comments: CAC Released Provisions on Personal Information Protection for Large-scale Personal Information Handlers (Draft for Comments)
On Aug 7, CAC released the Provisions on Personal Information Protection for Large-scale Personal Information Handlers (Draft for Comments) calling for public comments till September 7, 2026. The draft Provisions would establish a dedicated compliance framework for personal information handlers processing the PI of more than 10 million individuals. It would introduce additional requirements relating to organizational governance, security safeguards, compliance assessments, audits, risk management, and the protection of sensitive and minors’ personal information.
