In July 2023, Baidu was included in the first batch of the Personal Information Protection Impact Assessment (PIA) pilot program. The PIA program was jointly initiated by authoritative organizations such as the Data Security Community (DSC) and the Data Security Committee of the China Cybersecurity Industry Alliance (CCIA).

In this specialized program, Baidu, for data processing scenarios such as providing personal information to third parties, initiated tailored assessments on the impacts of such data processing activities on the personal information protection, on the basis of upholding the principle of data minimization. The assessments include but is not limited to: whether the purpose and method of processing personal information are legitimate, justifiable, and necessary; impact on individuals’ rights and interests and the security risks; and whether the security protection measures taken are legitimate, effective, and appropriate to the degree of risks. For behaviors involving third parties (including suppliers and partners) processing personal information, a comprehensive assessment has been conducted from perspectives such as the third party’s data compliance capability, the legitimacy of data processing methods, and the necessity of personal information processing. For Baidu’s internal processing of sensitive personal information and other data processing activities that have a significant impact on individuals’ rights and interests, a thorough assessment on legitimacy, justifiability, necessity, and security will also be carried out to maximize the protection of the legitimate rights and interests of the data subjects.

Baidu’s inclusion in the first batch of the Personal Information Protection Impact Assessment (PIA) pilot program recognizes its efforts in personal information protection. In the future, while safeguarding users’ rights and interests, Baidu will continue to provide higher quality services, making greater contributions to the healthy development of the internet industry.

Note: Brief introduction to the Personal Information Protection Impact Assessment (PIA) pilot program:

On November 1, 2021, the Personal Information Protection Law of the People’s Republic of China was officially implemented. Articles 55 and 56 constitute China’s Personal Information Protection Impact Assessment system. The system is not only a key element for personal information processors to fulfill their compliance obligations, but also an effective tool to enhance social trust in personal information processing activities and boost steady and healthy growth of the digital economy.

In March 2022, to address issues in the detailed operational guidelines, coordinated implementation, and effectiveness of the results of the personal information protection impact assessment, and to enhance the effective implementation of the system, organizations such as DSC and the Data Security Working Committee of CCIA jointly launched the “Personal Information Protection Impact Assessment” program.

Since the launch of the PIA program, a commonly used tool list for personal information protection impact assessment has been compiled. Pilot assessments on personal information protection impact have been conducted, and ongoing efforts will be made to facilitate personal information protection impact assessment.

E-mail: [email protected]: Baidu building, No. 10, Shangdi 10th Street, Haidian District, Beijing

Copyright © 2023 Baidu, Inc. 京ICP证030173号-1