China: Personal information protection in health and pharmaceutical industries

The PIPL sets out seven legal bases for processing personal information, and medical institutions and pharmaceutical companies can process personal information in Part One.

Part two introduces the specific protection obligations to be fulfilled by medical institutions and pharmaceutical companies in the key contexts of processing personal information.