In order to protect the security of network information, safeguard the legitimate rights and interests of citizens, legal persons and other organizations, and safeguard national security and social and public interests, the following decisions are made:

1、 The State protects electronic information that can identify citizens' personal identity and involves citizens' personal privacy.

No organization or individual may steal or obtain citizens' personal electronic information by other illegal means, or sell or illegally provide citizens' personal electronic information to others.

2、 When collecting and using citizens' personal electronic information in business activities, network service providers and other enterprises and institutions shall follow the principles of legality, legitimacy and necessity, clearly indicate the purpose, method and scope of information collection and use, and shall not collect and use information in violation of laws, regulations and the agreement of both parties with the consent of the recipient.

When network service providers and other enterprises and institutions collect and use citizens' personal electronic information, they shall disclose the rules for their collection and use.

3、 Network service providers, other enterprises, institutions and their staff members must strictly keep confidential the personal electronic information of citizens collected in business activities, and shall not disclose, tamper with, damage, sell or illegally provide it to others.

4、 Network service providers and other enterprises and institutions shall take technical measures and other necessary measures to ensure information security and prevent the leakage, destruction and loss of citizens' personal electronic information collected in business activities. When information leakage, damage or loss occurs or is likely to occur, remedial measures shall be taken immediately.

5、 The network service provider shall strengthen the management of the information released by its users. If it finds information that is prohibited from being released or transmitted by laws and regulations, it shall immediately stop transmitting the information, take measures such as elimination, keep relevant records, and report to the relevant competent department.

6、 When an Internet service provider provides users with website access services, fixed phone, mobile phone and other access procedures, or provides users with information publishing services, it shall require users to provide true identity information when signing agreements or confirming the provision of services.

7、 Any organization or individual shall not send commercial electronic information to its fixed phone, mobile phone or personal e-mail without the consent or request of the electronic information receiver, or the electronic information receiver expressly refuses.

8、 Citizens who find that network information that infringes on their legitimate rights and interests, such as divulging their personal identity, spreading their privacy, or being harassed by commercial electronic information, have the right to require network service providers to delete relevant information or take other necessary measures to stop it.

9、 Any organization or individual has the right to report and accuse the relevant competent departments of the illegal and criminal acts of stealing or illegally obtaining, selling or illegally providing citizens' personal electronic information to others, as well as other illegal and criminal acts of network information; The departments receiving reports and complaints shall deal with them in a timely manner according to law. The infringed person may bring a lawsuit according to law.

10、 The relevant competent departments shall perform their duties according to law within the scope of their respective functions and powers, take technical measures and other necessary measures to prevent, stop and investigate and deal with the illegal and criminal acts of stealing or illegally obtaining, selling or illegally providing citizens' personal electronic information to others, as well as other illegal and criminal acts of network information. When the relevant competent department performs its duties according to law, the network service provider shall cooperate and provide technical support.

State organs and their staff members shall keep confidential the citizens' personal electronic information they have learned in the course of performing their duties, and shall not disclose, tamper with or damage it, nor sell or illegally provide it to others.

11、 Those who violate this decision will be given warnings, fines, confiscation of illegal income, revocation of licenses or cancellation of filing, closure of websites, prohibition of relevant responsible persons from engaging in network service business and other punishments according to law, which will be recorded in social credit files and published; If it constitutes a violation of the administration of public security, it shall be given a public security administration punishment according to law. If a crime is constituted, criminal responsibility shall be investigated according to law. Whoever infringes upon the civil rights and interests of others shall bear civil liability according to law.

12、 This Decision shall come into force as of the date of promulgation.

(Original title: Decision of the Standing Committee of the National People's Congress on Strengthening the Protection of Network Information)