The Law on the Protection of Personal Information stipulates which personal information is leaked or illegally used.

1. The Law on the Protection of Personal Information stipulates that sensitive personal information refers to personal information that, once leaked or illegally used, will easily lead to an infringement on the personal dignity of natural persons or harm to personal and property safety, including biometric identification, religious belief, specific identity, medical and health care, financial accounts, whereabouts and other information, as well as personal information of minors under 14 years old. Only when there is a specific purpose and sufficient necessity, and strict protection measures are taken, can personal information processors handle sensitive personal information.

Second, what is personal sensitive information?

Personal sensitive information refers to personal information that a natural person's personal dignity is violated or personal and property safety is endangered, including: biometric identification, religious belief, specific identity, medical health, financial accounts, whereabouts, etc.

3. What are the characteristics of citizens' personal information?

(1) is directly related to individual citizens and can reflect the local or overall characteristics of citizens; Or once obtained and used, it is proprietary. The former is the date of birth and fingerprints of citizens, while the latter is the ID number and home address.

(2) It has legal protection value. Citizens' personal information carries citizens' individual characteristics, even their rights. If it is leaked and obtained by others, it will inevitably lead to the danger that citizens may be infringed at any time.

(3) The protection of citizens' personal information is not based on the request of the information owner. No organization or individual has the right to disclose or obtain personal information unless it is based on the need of safeguarding national interests, public interests or the will of the information owner.

Legal basis:

Article 28 of the Law of People's Republic of China (PRC) on the Protection of Personal Information belongs to sensitive personal information. Once it is leaked or illegally used, it will easily lead to the violation of the personal dignity of natural persons or the harm to personal and property safety, including biometric identification, religious belief, specific identity, medical health, financial accounts, whereabouts and other information, as well as the personal information of minors under 14 years old. Only when there is a specific purpose and sufficient necessity, and strict protection measures are taken, can personal information processors handle sensitive personal information.

Twenty-ninth handling of sensitive personal information should obtain the individual's separate consent; Where laws and administrative regulations stipulate that written consent shall be obtained for handling personal sensitive information, such provisions shall prevail.

Article 30 When handling sensitive personal information, a personal information processor shall inform the individual of the necessity of handling sensitive personal information and the impact on personal rights and interests in addition to the matters specified in the first paragraph of Article 17 of this Law; Except in accordance with the provisions of this law, it is not necessary to notify individuals.

Thirty-second laws and administrative regulations stipulate that the handling of personal sensitive information should obtain relevant administrative license or have other restrictions, such provisions shall prevail.