Several initiatives signal big changes for the regulation of privacy in China in 2019 reports the International Association of Privacy Professionals (IAPP).
- End of bundled consent: Controllers are required to provide a privacy notice in intelligible, clear and concise wording and to obtain freely given consent from data subjects. The bundled consent, or “take-it-or-leave-it” approach, is outright discouraged. This is pursuant to a January 25, 2018 joint announcement by the Cyberspace Administration of China, the Ministry of Industry and Information Technology, the Ministry of Public Security, and the State Administration for Market Regulation.
- Opt out from behavioral advertising: App operators are encouraged to provide an opt-out mechanism for online behavioral advertisement or personalized recommendations, as well as displays for news, feeds or advertisement.
Other provisions deal with cybersecurity requirements for apps and services.