China has released the final version of a national standard on personal information protection titled "GB/T 35273-2017 Information Technology – Personal Information Security Specification."  The specification is expected to take effect on May 1, 2018.

While the standard is not a law or egulation, it is likely to be the standard for determining if companies fare adherent.  The standard is aimed at the collection, retention, use, and sharing/transfer of such information.

Examples of sensitive data may include a person's ID card, bank account number, and personally identifiable information of individuals below age 15.