personal information. For any change of the original purpose or method of processing, the receiving part shall obtain consent from the individual anew in accordance with this Law. Article 24 Where personal information is used by personal information processors in automated decision-making, transparency of the decision-making and fairness and impartiality of the results shall be ensured, and no unreasonable differential treatment of individuals in terms of transaction prices or other transaction terms may be implemented. If business marketing or push-based information delivery is conducted toward an individual by means of automated decision-making, an option not targeting at personal characteristics of the individual or an easy way to refuse to receive shall be provided to the individual. If a decision made by a personal information processor through automated decision-making has a material impact on an individual's rights and interests, the individual shall have the right to demand the personal information processor to provide an explanation, as well as the right to refuse the making of decisions by the personal information processor solely by means of automated decision-making. Article 25 Personal information processors shall not disclose any personal information of an individual processed by them, except with specific consent obtained from the individual. Article 26 The installment of any image capturing or personal identification equipment in a public place shall be necessary for maintaining public security, comply with the relevant regulations of the State, and be accompanied with a prominent sign indicating the equipment. Any personal image or personal identification information of an individual collected can only be used for the purpose of maintaining public security, and shall not be used for any other purpose, except with specific consent obtained from the individual. Article 27 Personal information processors may process personal information of an individual already disclosed by the individual or otherwise legally disclosed, unless such processing is expressly refused by the individual. For the processing of any disclosed personal information of an individual that will have a material impact on the individual, personal information processors shall obtain consent from the individual in accordance with this Law. Section 2 Rules of Processing of Sensitive Personal Information Article 28 Sensitive personal information refers to personal information that, once leaked or illegally used, will easily lead to infringement of the human dignity or harm to the personal or property safety of a natural person, including biometric recognition, religious belief, specific identity, medical and health, financial account, personal location tracking and other information of a natural person, as well as any personal information of a minor under the age of 14. Personal information processors may process sensitive personal information only when there is a specified purpose and sufficient necessity and there are strict measures adopted for its protection. Article 29 For the processing of sensitive personal information of any individual, specific consent shall be obtained from the individual; where written consent shall be obtained for the processing of sensitive personal information as provided by law or administrative regulations, such provision shall prevail. Article 30 To process sensitive personal information of any individual, a personal information processor shall, in addition to the matters specified in the first paragraph of Article 17 of this Law, inform the individual of the necessity of processing such sensitive personal information and the impact on the individual's rights and interests, except where not informing the individual of such information is allowed as provided by this Law. Article 31 For the processing of personal information of a minor under the age of 14, personal information processors shall obtain the consent of a parent or guardian of the minor. 5