Xinhua also reported that the law will create stronger regulation of China’s public surveillance system, requiring the disclosure and labelling of hardware used in identifying people in public places. Collected data can only be used for maintaining public safety, the news agency said. China operates a vast network of cameras, backed by advanced facial recognition and AI-driven technology, to control crime but also to check identities in subways, schools and office buildings.

The law also stipulates that companies cannot use personal data to target individuals for marketing, according to state broadcaster CCTV. And firms must provide easy ways for users to opt-out of targeted marketing, reported CNN. CCTV also reported that sensitive personal information — such as biometrics, health care and financial accounts — should only be processed with the individual’s consent.