On July 15, the National Technical Committee 260 on Cyber-security Standardization Administration of China (TC260) released the Data Security Technology — Personal Information Protection Compliance Audit Requirements (Draft for Comment) (the "Draft") for public comments, and the cut-off date for submitting comments is September 11, 2024.
The Draft sets out the audit principles and general audit requirements for personal information protection compliance audits, putting forward overall requirements for personal information processors as well as auditors that conduct personal information protection compliance audits. The Draft is designed to implement Article 54 of the Personal Information Protection Law of the People's Republic of China, which states that "personal information processors shall have the compliance of their activities of processing of personal information with laws and administrative regulations audited on a regular basis." In addition, the schedules of the Draft specify reference documents including the personal information protection compliance audit process, audit evidence, audit content and methods, audit working paper templates, and audit report templates.
(Source: National Technical Committee 260 on Cyber-security Standardization Administration of China (TC260))
The Watson & Band website is intended for informational purposes only. Nothing in this site is to be construed as creating an attorney-client relationship between the reader and Watson & Band or as offering legal advice on any specific matter. Since we are not providing legal advice through this website, you should not act upon any information that you might receive here without first seeking professional counsel. No client or other reader should act or refrain from acting on the basis of any information contained in the Watson & Band website without seeking appropriate legal or other professional advice based on the particular facts and circumstances at issue.
