China Data Security Law (DSL) 38-39: Art. 38-39 State organs collect and use data within their statutory duties, keep it confidential, and run data security management systems

State organs that need to collect or use data to perform statutory duties do so within the scope those duties require and under the conditions and procedures laws and regulations provide, preserve the confidentiality of personal privacy, personal information, trade secrets and confidential business information accessed in the course of their duties and do not divulge or unlawfully provide it, and establish sound data security management systems, perform their data security responsibilities and ensure the security of government data.