Duty LXD-1105
Processes de-identified data, in China
Personal Information Protection Law, Anonymization, De-identification and Security Measuressince 3 lines
PIPL Arts. 4, 51 and 73 · Read the law's page
- Treat information as outside the definition of personal information on the strength of anonymization only if the processing leaves a specific natural person unidentifiable and cannot be reversed (Article 4 and Article 73, item 4).
- Do not treat de-identification as anonymization: information processed so that it cannot identify a specific natural person without additional information is de-identified (Article 73, item 3), and the exclusion in Article 4 is written for anonymized information alone.
- Take the technical security measures Article 51, item 3 names, encryption, de-identification and similar measures, in the form that fits the purpose and method of the processing, the type of personal information, the impact on individuals' rights and interests and the security risks, so as to prevent unauthorized access and the leakage, tampering and loss of personal information (Article 51).