New draft regulation aims to improve data security

China's national cyberspace regulator recently published a draft document which proposes establishing a system of data classification and protection to promote data development, utilization and security.

The draft, published by the Cyberspace Administration of China last week, will solicit public opinions until Dec 13.

According to the draft regulation, data will be divided into the categories of general, important or core, based on the impact and importance of data on national security, public interests, or the legitimate rights and interests of individuals and organizations.

In addition, if a data processor uses biometric information for user identity authentication, it will have to first conduct a risk assessment on the necessity and security of the data.

A data processor cannot use facial, gait, fingerprint, iris or voiceprint authentication as the only means of verifying personal identity, as this often forces users to agree to the collection of their biometric data, stated the draft regulation.