China's PIPL Enforcement: Record Fine for Illegal Personal Data Processing

Record PIPL Enforcement Action

Chinese data protection authorities have imposed a record-breaking fine on a major domestic technology company for violations of the Personal Information Protection Law (PIPL). The penalty signals an intensification of enforcement efforts under China's comprehensive privacy framework.

Violations Found

The investigation revealed that the company had collected extensive user behavioral data, including location tracking and browsing history, without obtaining valid consent. The company also failed to conduct required personal information protection impact assessments and did not appoint a dedicated data protection officer as mandated by law.

Remediation Requirements

In addition to the financial penalty, the company has been ordered to delete all unlawfully collected data within 30 days, implement a comprehensive consent management platform, and submit to regular compliance audits for the next three years.

Growing Enforcement Trend

This enforcement action is part of a broader trend of increased PIPL enforcement in China. Regulators have signaled that they will continue to prioritize cases involving large-scale collection of personal information, particularly by internet platforms and mobile applications.