China Data Security Law (DSL) DSL-Art32: Lawful and Proper Collection of Data (Art. 32)

Any organisation or individual collecting data must use lawful and proper methods and must not steal or otherwise illegally obtain data; collection must stay within any purpose/scope set by law.

Other controls in China DSL: Data Security Protection Obligations (Chapter IV)

DSL-Art27 Data Security Management System and Whole-Lifecycle Measures (Art. 27)
DSL-Art28 Lawful and Legitimate Data Processing (Art. 28)
DSL-Art29 Risk Monitoring, Remediation and Incident Notification (Art. 29)
DSL-Art30 Important Data Risk Assessment and Reporting (Art. 30)
DSL-Art31 Cross-Border Transfer of Important Data (Art. 31)
DSL-Art33 Data Trading Intermediary Obligations (Art. 33)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All China Data Security Law (DSL) controls