Payment and Clearing Association: Personal payment information should not be provided to non-business stakeholders.

  CCTV News:According to the website of China Payment and Clearing Association, in order to meet the latest requirements of national laws and regulations and better serve the development of the industry, China Payment and Clearing Association revised the group standard "Technical Guidelines for the Protection of Personal Information" (PCAC/T 0001:2016) issued by the Association in 2016 and renamed it "Guidelines for the Protection of Personal Payment Information". After deliberation and adoption at the third meeting of the fourth Council of China Payment and Clearing Association, it is hereby promulgated and implemented as of the date of promulgation, and the original Technical Guidelines for the Protection of Personal Information shall be abolished.

The Guidelines clarify that the use and processing of personal payment information should strictly limit its purpose of use. In principle, payment business entities should not use personal payment information outside the payment business. The Guidelines also propose that, in principle, personal payment information should not be provided to non-business related parties, and personal payment information is not allowed to be made public. If the payment business entity provides personal payment information to the merchant for the needs of reconciliation and other activities, it should desensitize the personal payment information and require the merchant to do a good job in protecting the personal payment information. In addition, the Guidelines clarify that the exit of personal payment information should meet the requirements of laws and regulations such as the Law on the Protection of Personal Information and the Measures for the Safety Assessment of Data Exit.