China introduces draft data protection legislation

According to Global Times, a draft legislation on data protection has reached the first review stage in Chinese legislature. The draft text includes fines of up to 50 million yuan (US$7.4 million), or 5% of the previous year’s turnover, in case of violations. It defines sensitive private data as race, ethnicity, religion, biometric data, medical and financial data, and personal trajectory. Large data infrastructure operators and entities channeling personal information outside China will need to undergo compulsory security assessment by the Chinese authorities.