China Data Security Law (DSL) 33-34: Art. 33-34 Data transaction intermediaries verify sources and identities and keep records; data services obtain the required administrative permits

A data transaction intermediary providing services must require data providers to specify the sources of the data, verify the identities of both parties to the transaction and retain the verification and transaction records; and where laws or administrative regulations require an administrative permit for data processing services, the service provider obtains it.