information. Article 2 The personal information of any natural person shall be protected by law, and no organization or individual may infringe upon the personal information rights and interests of any natural person. Article 3 This Law shall apply to any activity of processing of personal information of a natural person that is carried out within the territory of the People's Republic of China. This Law shall also apply to any activity of processing of personal information of any natural person located within the territory of the People's Republic of China that is carried out outside the territory of the People's Republic of China under any of the following circumstances: 1. Where the purpose of the activity is to provide a product or service to that natural person located within China; 2. Where the purpose of the activity is to analyze or assess the behavior of that natural person located within China; or 3. Any other circumstance as provided by law or administrative regulations. Article 4 Personal information refers to any kind of information related to an identified or identifiable natural person as electronically or otherwise recorded, excluding information that has been anonymized. Processing of personal information includes the collection, storage, use, processing, transmission, provision, disclosure, and deletion of personal information. Article 5 Personal information shall be processed in accordance with the principles of lawfulness, legitimacy, necessity and good faith, and not in any manner that is misleading, fraudulent or coercive. Article 6 Processing of personal information shall be for a specified and reasonable purpose, and shall be conducted for a purpose directly relevant to the purpose of processing and in a way that has the least impact on personal rights and interests. Collection of personal information shall be limited to the minimum scope necessary for achieving the purpose of processing and shall not be excessive. Article 7 Personal information shall be processed in accordance with the principles of openness and transparency, with the rules of processing of personal information disclosed, and the purpose, method and scope of processing expressly stated. Article 8 The quality of personal information shall be ensured when the personal information is processed in order to avoid any negative impact on personal rights and interests due to any inaccuracy or incompleteness of the personal information processed. Article 9 Personal information processors shall be responsible for their activities of processing of personal information, and take necessary measures to ensure the security of the personal information processed. Article 10 No organization or individual may illegally collect, use, process, or transmit any personal information of another person, or illegally deal in, provide, or disclose any personal information of another person; or engage in any activity of processing of personal information that endangers national security or public interests. Article 11 The State will establish a sound personal information protection regime to prevent and punish any act of infringement of personal information rights and interests, strengthen publicity and education on personal information protection, and promote the creation of a sound environment for the government, enterprises, relevant trade organizations, and the public to jointly participate in personal information protection. 2