China Personal Information Protection Law (PIPL) 57: Art. 57 Breach: immediate remediation and notification to the departments and the individuals with the prescribed content

Where personal information has been or may be leaked, tampered with or lost, the processor must immediately take remedial measures and notify the departments with protection duties and the affected individuals, stating the categories of information affected and the causes and possible harm, the remedial measures taken and the measures individuals can take to mitigate harm, and the processor's contact information; individuals need not be notified where the processor's measures can effectively avoid the harm, but the departments may require notification where they consider harm may result.