Personal Information Protection Law: Difference between revisions
Line 13: | Line 13: | ||
==ICANN's POV== | ==ICANN's POV== | ||
On October 21, 2021, [[ICANN]] alerted the community that PIPL would soon be implemented. Then on June 27, 2022, [[ICANN Organization]] released an advisory on the law. | On October 21, 2021, [[ICANN]] alerted the community that PIPL would soon be implemented. Then on June 27, 2022, [[ICANN Organization]] released an advisory on the law. | ||
Following | Following PIPL's implementation, ICANN's [[Contractual Compliance]] began receiving complaints in which [[registrar]]s assert that the PIPL is being used as a basis for denying requests from third parties for access to nonpublic gTLD registration data.<ref>[https://www.icann.org/resources/pages/advisory-chinese-privacy-law-impact-registration-data-disclosure-2022-06-27-en Chinese Privacy Law Impacts Registration Data Disclosure, ICANN Resourses]</ref> | ||
In the advisory, ICANN explains that | In the advisory, ICANN explains that | ||
* Like GDPR, PIPL specifies legal bases for processing personal data, including transfers of personal data to third parties. However, PIPL does not contain the "legitimate interest" purpose that GDPR Article 6(1)f) provides. | * Like GDPR, PIPL specifies legal bases for processing personal data, including transfers of personal data to third parties. However, PIPL does not contain the "legitimate interest" purpose that GDPR Article 6(1)f) provides. |