TC260 Releases the Guide for Identifying Sensitive Personal Information
On September 19, the National Technical Committee 260 on Cyber-security Standardization Administration of China (TC260) released the Practical Guide to Cyber-security Standard — Guide for Identifying Sensitive Personal Information (the "Guide").
The Guide provides rules for identifying sensitive personal information, alongside common categories and examples of such information. It can be used by organizations to identify sensitive personal information and provide reference for processing and protecting such information. According to the Guide, personal information processors must follow four specific rules, one of which states that "any personal information that meets one or more specified conditions shall be identified as sensitive personal information." Furthermore, the Guide identifies eight common categories of sensitive personal information, including biometric data, religious beliefs, and personal information of specific identities.
(Source: National Technical Committee 260 on Cyber-security Standardization Administration of China)