Data Protection in China; A Comparative Study of the Data Protection Approach in the United States and the European Union

Document Type : Research Paper

Authors

1 Associate Professor, Faculty of Law & Political Science, University of Shahid Beheshti, Tehran, Iran

2 Ph.D. in Private Law, Faculty of Law & Political Science, University of Allameh Tabataba`i, Tehran, Iran

Abstract

While the European Union and the United States have each designed their own model for personal data protection, China is swiftly developing a particular data protection system in order to have power and competitive advantage over European countries, the United States and Japan. To explain the model, this article seeks to answer the question: what are the main features of the Chinese personal data protection model? Has China been impressed by the American or European model? For this purpose, the specific model designed by this country based on American and European patterns has been explained and analyzed. The results show that by imposing fragmented and sectoral regulations, China had first taken a similar approach to the United States’ in the field of data protection. It has then gradually moved towards the European approach and considered adoption of a comprehensive data protection law. Eventually, however, it has taken different approaches regarding the private and public sectors, data localization and restrictions on cross-border data transfer. Given that Iran has also just started the design of a data protection system, being informed about these approaches, especially the Chinese one, can put their strengths and weaknesses before Iranian policymakers and legislators.

Keywords


  1. الف) فارسی

    1. انصاری، باقر؛ عطّار، شیما؛ صالحی، امیرحسین (1400)، حقوق داده‌ها و هوش مصنوعی (مفاهیم و چالش‌ها)، چ 1، تهران: شرکت سهامی انتشار.
    2. طباطبائی، سید حسین (1400)، مطالعات حقوقی چین «از کجا آغاز کنیم؟، چ 1، تهران: نگاه بینه.

     

    ب) انگلیسی

    1. Aljazeera, “Coronavirus: China uses facial recognition and infrared scanners”, 2020, available at: <https://www.aljazeera.com/program/newsfeed/2020/2/24/coronavirus-china-uses-facial-recognition-and-infrared-scanners>.
    2. Annoni, A. & Benczur, P.& Bertoldi, P.& Delipetrev, B.& De Prato, G.& Feijoo, C.& Fernandez Macias, E.& Gomez Gutierrez, E.& Iglesias Portela, M.& Junklewitz, H.& Lopez Cobo, M.& Martens, B.& Figueiredo Do Nascimento, S.& Nativi, S.& Polvora, A.& Sanchez Martin, J.I.& Tolan, S.& Tuomi, I. & Vesnic Alujevic, L. (2018), Artificial Intelligence: A European Perspective, Craglia, M. editor(s), Luxembourg: Publications Office of the European Union.
    3. “China Issues Draft Data Security Law for Public Comment”, 2020, available at: <https://www.lw.com/thoughtLeadership/lw-china-issues-draft-data-security-law-for-public-comment>.
    4. Civil Code of the People's Republic of China, 2020.
    5. Constitution of the People's Republic of China, 2018.
    6. Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data of Council of Europe, Strasbourg, 1981.
    7. Cybersecurity Law of the People’s Republic of China, 2017.
    8. Daly, Angela & Hagendorff, Thilo & Hui, Li & Mann, Monique & Marda, Vidushi & Wagner, Ben & Wang, Wei & Witteborn, Saskia (2019), “Artificial Intelligence, Governance and Ethics: Global Perspectives”, the Chinese University of Hong Kong Faculty of Law, Research Paper No. 2019- 15.
    9. Data Security Law of the People’s Republic of China, 2021.
    10. De Hert, Paul ; Papakonstantinou, Vagelis (2015). The data protection regime in China, Directorate General for Internal Policies Policy Department C: Citizens' Rights and Constitutional Affairs Civil Liberties, Justice and Home Affairs, European parliament.
    11. Deloitte, “Global artificial intelligence industry whitepaper”, 2019, available at: < https://www2.deloitte.com/cn/en/pages/technology-media-and-telecommunications/articles/global-ai-development-white-paper.html>.
    12. Determann, Lothar (2020), “Healthy Data Protection”, Michigan Technology Law Review, Vol. 26.
    13. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
    14. DW, “Using facial recognition against COVID-19”, 2020, available at: <https://www.dw.com/en/using-facial-recognition-against-covid-19/av-53868752>.
    15. European Commission, “USA- China- EU plans for AI: where do we stand?”, 2018, available at: <https://ati.ec.europa.eu/reports/technology-watch/usa-china-eu-plans-ai-where-do-we-stand-0>.
    16. France 24, “Facial recognition tech fights coronavirus in Chinese city”, 2021, available at: <https://www.france24.com/en/live-news/20210713-facial-recognition-tech-fights-coronavirus-in-chinese-city>.
    17. Geller, Anja (2020), “How Comprehensive Is Chinese Data Protection Law? A Systematisation of Chinese Data Protection Law from a European Perspective”, Journal of European and International IP Law, 69(12).
    18. Kewalramani, Manoj (2018), “China’s Quest for AI Leadership: Prospects and Challenges”, Takshashila Working Paper.
    19. National Standard of Information security technology— Personal information security specification, 2020.
    20. Ning, susan & hen wu, “data protection 2020- A practical cross-border insight into data protection law”, 2020, available at: < https://iclg.com/practice-areas/data-protection-laws-and-regulations/china>.
    21. “Number of internet users in China from December 2008 to December 2020”, 2021, available at: <https://www.statista.com/statistics/265140/number-of-internet-users-in-china/>
    22. Palmieri, Nicholas F. (2019), “Data Protection in an Increasingly Globalized World”, Indiana law journal, vol. 94.
    23. Pernot-Leplay, Emmanuel (2020), “China's Approach on Data Privacy Law: A Third Way Between the U.S. and the E.U.?”, Penn State Journal of Law & International Affairs, Vol. 8, No. 1.
    24. Personal Information Protection Law of the People's Republic of China, 2021.
    25. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
    26. The New York Times, “Inside China’s dystopian dreams: A.I., shame and lots of cameras”, 2018, available at: <https://www.nytimes.com/2018/07/08/business/china-surveillancetechnology.html>.
    27. Wright, Nicholas d. (2019), Artificial Intelligence, China, Russia, and the Global Order: Technological, Political, Global and Creative Perspectives, independently published.
    28. Yang Gao, Reymond (2020), “Personal Information Protection Under Chinese Civil Code: A Newly Established Private Right in The Digital Era”, Tsinghua China Law Review, Vol. 13.
    29. Zhao, Bo & Chen, Weiquan (2019), “Data Protection as a Fundamental Right: The European General Data Protection Regulation and Its Exterritorial Application in China”, US-China Law Review, Vol. 16, No. 3.