The "Personal Information Protection Law of the People's Republic of China" will come into force on November 1, 2021 . The law clearly prohibits the excessive collection of personal information and the killing of big data, regulates the processing of sensitive personal information such as face information, and improves the working mechanism for personal information protection complaints and reporting, fully responding to social concerns Hot and difficult issues provide strong legal protection. 
Link:
http://www.npc.gov.cn/npc/c30834/202108/a8c4e3672c74491a80b53a172bb753fe.shtml
Personal information security is guaranteed by law
01. Restrict excessive collection of user personal information
In the past, the embarrassing situation faced by users was that "agree" was often equivalent to "have to". For example, in most apps, if the relevant terms are not checked, users will not be able to install and use them, which often involves some personal privacy information, such as access to address, address book, SMS sending and other authorizations.
Article 6 of the "Personal Information Protection Law of the People's Republic of China" : The processing of personal information shall have a clear and reasonable purpose, and shall be directly related to the purpose of processing, and the measures that have the greatest impact on personal rights and interests shall