On September 15, 2023, the Cyberspace Administration of China (CAC) published Guiding Opinions on Further Strengthening the Reporting of Internet Infringement Information. In particular, the Opinions highlight the need to handle reports involving individuals.

Specifically, the Opinions outline the need for organizations to focus on reports involving personal information leaks such as addresses, identity documentation, contact information, medical information, and financial information, without obtaining individual consent or in violation of data protection regulations. Likewise, the Opinions provide for the need to establish a whistleblower information protection system, with specific provisions aimed to prevent the tampering, damage, sale, or illegal provision of whistleblower personal information to others.

In addition, the Opinions recommend the establishment of an online complaint window to promptly handle complaints to safeguard the rights of data subjects. Regarding the submission of complaints and reports, the Opinions recommend the implementation of a time-limited privacy mechanism for reports that are time-sensitive, take a long time to resolve, and may have a negative impact on the reporter. Such privacy measures should aim to block the sharing and dissemination of the reporter's personal information and complete the work of the reporter.

You can read the Opinions, only available in Chinese, here.