Public source reference library for China data regulation
AlertsSource policyMy Library中文
China Data RegulationLegal reference library

Research across the library

Search laws, regulations, standards and guides

Suggested searches

Current priorities

2026-07-03Revised Internet Information Service Measures draft2026-06-18Network data risk assessment: draft versus final

Standards hub

Personal Information and Privacy Standards

Structured source tracker for personal information and privacy related standards. Titles and metadata remain under verification unless otherwise marked.

Standard No.TitleStatusTranslationVerificationRelated Laws
GB/T 35273-2020Information security technology — Personal information security specificationeffectivepublic metadata onlyVerifiedPIPL
GB/T 37964-2019Information security technology — Guide for de-identifying personal informationeffectivepublic metadata onlyVerifiedPIPL
GB/T 39335-2020Information security technology — Guidance for personal information security impact assessmenteffectivepublic metadata onlyVerifiedPIPL
GB/T 43739-2024Information security technology — Guidance for normative review and management of personal information processing by apps in app storeseffectivepublic metadata onlyVerifiedPIPL
GB/T 44588-2024Cybersecurity technology — Requirements for privacy policies of internet platforms and product serviceseffectivepublic metadata onlyVerifiedPIPL
GB/T 45404-2025Data security technology — Requirements for internal personal-information protection supervisory bodies in large internet enterpriseseffectivepublic metadata onlyVerifiedPIPL
GB/T 45574-2025Data security technology — Security requirements for processing sensitive personal informationeffectivepublic metadata onlyVerifiedPIPL
GB/T 46901-2025Data security technology — Requirements for personal-information transfer based on an individual's requesteffectivepublic metadata onlyVerifiedPIPL
GB/T 46903-2025Data security technology — Requirements for personal-information protection compliance auditseffectivepublic metadata onlyVerifiedPIPL
GB/T 47469-2026Data security technology — Guidance for managing personal-information processing activities by mobile smart-terminal applicationsupcomingpublic metadata onlyVerifiedPIPL