2. Developing platform rules in accordance with the principles of openness, fairness, and impartiality,
specifying the standards for processing of personal information and the obligations of personal information
protection to be met by product or service providers operating on their platform;
3. Ceasing the provision of any service to any product or service provider operating on their platform who
commits a serious violation of any law or administrative regulation in the processing of personal information;
and
4. Publishing a social responsibility report on personal information protection on a regular basis and
accepting supervision from the public.
Article 59 The contracted party to any contracted processing of personal information shall take any necessary
measure to protect the security of the personal information processed as required by this Law and any
relevant law or administrative regulations, and assist the contracting personal information processor in
performing the obligations specified in this Law.
Chapter VI Authorities Performing Personal Information Protection Duties
Article 60 The national cyberspace authority shall be responsible for the overall planning and coordination of
personal information protection and related supervision and regulation. Relevant authorities under the State
Council shall be responsible for personal information protection and the supervision and regulation thereof
within their respective scopes of duties in accordance with this Law and relevant laws and administrative
regulations.
The duties for personal information protection and the supervision and regulation thereof to be performed
by the relevant authorities of local people's governments at the county level or above shall be determined in
accordance with relevant regulations of the State.
Authorities specified in the preceding two paragraphs shall be collectively referred to as authorities
performing personal information protection duties.
Article 61 Authorities performing personal information protection duties shall perform the following personal
information protection duties:
1. Conducting awareness and education activities for personal information protection, and guiding and
supervising personal information processors in personal information protection;
2. Accepting and handling personal information protection-related complaints and reports;
3. Organization the testing and evaluation of any application program etc., for personal information
protection, and disclosing the results;
4. Investigating and handling illegal activities of processing of personal information; and
5. Any other duty as prescribed by law or administrative regulations.
Article 62 The national cyberspace authority shall organize and coordinate relevant authorities in promoting
the following personal information protection-related work:
1. Developing detailed rules and standards for personal information protection;
2. Developing special rules and standards for personal information protection regarding small personal
information processors, processing of sensitive personal information, and face recognition, artificial
intelligence and other new technologies and new applications;
3. Supporting the research and development as well as promotion of the application of secure and accessible
electronic identity authentication technology, and driving the development of public services of online
identity certification;
4. Driving the building of a socialized service system for personal information protection, and supporting
relevant institutions in providing personal information protection assessment and certification services; and
5.Improving the complaints and reports mechanism for personal information protection.
Article 63 An authority performing personal information protection duties may adopt the following measures
10