1. Data privacy law in Asia-pacific -introduction to the privacy law in China (mainland China and Hong Kong) Yue Liu yuli@jus.uio.no

2. agenda Introduction Mainland china: Privacy protection Data privacy Hong Kong, Special Administration of China

3. Introduction Jurisdictions in China Chinese culture and the concept of privacy Nebulous concept Not in harmony with Chinese tradition Privacy protection: law and judicial practice

4. Data Privacy law in mainland China Commitment ICCPR (article 17) (signed not ratified) CESCR (ratified with reservations) APEC privacy framework (2003-05)

5. Data Privacy law in mainland China Privacy law overview 1.Constitutional protection Art38:personal dignity Art39: illegal searches or intrude on private homes Art 40: freedom and privacy of correspondence

6. Data Privacy law in mainland China 2. Statutory protection The privacy on personality and reputation (civil law article 101,140) Supreme courts interpretation Personal information in mail and e-mail, illegal search (Criminal law article 252,353,245)

7. Data Privacy law in mainland China 2. Statutory protection Personal information on health and medical records (law for doctor, regulations to medical records) Depositors account (Regulation on commercial banks article 6 ) ID card ( Regulations on Identity card)

8. Data Privacy law in mainland China Privacy protection in practice: Case study: 1.Two high school students in shanghai…(2003) 2. publish SARS patients name and address etc. (2003) 3. A young couple peeked by their landlord for three years (2006) 4. housekeeper sued her employer (2005)

9. Data Privacy law in mainland China Characteristics for the privacy protection in China Privacy and Chinese morality Privacy and right of reputation Scope of privacy: private life and affair; personal information; personal communication

10. Data Privacy law in mainland China Data protection in China No general data protection legislation Temporary Implementation Rules on the Management of International Networking of Computer Information Networks. In article 18, Invasion of privacy on the Internet is prohibited. Provisional Regulations of the People's Republic of China on the Management of International Networking of Computer Information Networks. 1997, Article 7 the internet user s correspondence freedom and privacy is protected,

11. Data Privacy law in mainland China Proposed Data protection Law (Experts Suggestions draft 2007) General principles 1. Lawfulness 2.Protection of Rights 3.Principle of Balance of Interests 4.Principle of Information Quality

12. Data Privacy law in mainland China 5. Principle of Information Security 6. Principle of Professional duties 7. Principle of Remedy

13. Data Privacy law in China-Hong Kong Constitutional protection Basic law must apply ICCPR art17 ICCPR provisions replicated in Bill of rights Ordinance- public authorities Basic law art29, 30 Common law protection: Wainwright case 2004 UK (Wainwright and another v. Home Office )

14. Data Privacy law in China-Hong Kong The Personal Data Privacy Ordinance: Scope Public sectors and private users Exemptions Public and social interests media, employment etc.

15. Data Privacy law in China- Hong Kong Personal Data: three criteria Eastweek Publisher Ltd v Privacy Commissioner for Personal Data 2001 Data: comprise any representation of information, including an expression of opinion in any documents.

16. Data Privacy law in China-Hong Kong Content :6 principles Purpose and manner of collection : notice Accuracy and duration of retention: deletion obligation Limits the use or disclosure: allowable secondary use Security: not special treatment sensitive informatin Openness by data user-policies and practices Right of access and correction

17. Thank you for your attention!