China introduces draft data protection legislation

According to the Global Times, draft legislation on data protection has reached the first review stage in the Chinese legislature. The draft text includes fines of up to 50 million yuan (US$7.4 million), or 5% of the previous year’s turnover. It defines sensitive private data as biometric, medical, and financial data, as well as data on race, ethnicity, religion, and personal trajectory. Large data infrastructure operators and entities channeling personal information outside China will need to undergo a compulsory security assessment by Chinese authorities