The Decision was made by the Standing Committee of the National People’s Congress and entered into force on 28 Dec. 2012.

The Decision establishes, for the first time in China, the rules for the collection and use of personal information and the obligations of network service providers to protect personal information.

The Cybersecurity Law, subsequently promulgated in 2018, has adopted most content of the Decision.