China Cybersecurity Law (CSL) 44-45: Art. 44-45 No disclosure, tampering or damage; no provision to others without consent unless irreversibly de-identified; security measures; breach remediation with user notice and reporting; deletion and correction on request

What does 44-45 require?

Network operators may not disclose, tamper with or damage the personal information they collect and may not provide it to others without the individual's consent unless it has been processed so that specific individuals cannot be identified and the information cannot be restored; they adopt technical and other measures to secure it against leakage, damage and loss, and where leakage, damage or loss occurs or may have occurred immediately take remedial measures, promptly inform users and report to the main oversight departments; individuals may demand deletion where collection or use violated law or the agreement and correction where the information is inaccurate, and operators must delete or correct.