China Insurance Regulatory Agency Promulgates New Rule Protecting Personal Data of Life Insurance Customers
Time 2 Minute Read

On November 4, 2013, the China Insurance Regulatory Commission, which is the Chinese regulatory and administrative authority for the insurance sector, issued the Interim Measures for the Management of the Authenticity of Information of Life Insurance Customers (the “Measures”). The Measures require life insurance companies and their agents to ensure the authenticity of personal data of life insurance policy holders. To help achieve this objective, the Measures impose rules for the collection, recording, management and use of the personal data of policy holders.

With respect to the collection of the personal data of a life insurance policy holder, the Measures set forth the following principal requirements:

  • To inform the client, within the text of the insurance policy, of the necessity of the data collection and the uses of the data, and the result of not providing real and complete personal data;
  • To take effective measures to verify the identity of a client;
  • To record the client’s personal data correctly and completely;
  • To promise not to use the client’s personal data, without his or her consent, for marketing activities, whether by the life insurance company itself or by a third party;
  • To strictly limit the scope of entities, departments and personnel that can access the client’s personal data;
  • To prohibit any employee or insurance agent from forging or falsifying client information, accessing or using client information out of the limited permitted scope of use, or leaking or selling client information; and
  • For any employee or insurance agent who commits a violation described in the item above, to terminate the individual’s employment contract or the agency agreement.  In addition, no other insurance company may hire such individual as an insurance agent.

As we previously reported, China’s personal information protection framework is developing on a piecemeal, sector-by-sector, regulation-by-regulation basis. The Measures represent a more focused, and relatively narrow, instance of this pattern of development.

You May Also Be Interested In

Time 2 Minute Read

On January 30, 2026, the Cybersecurity Administration of China released a Q&A document on policies and regulations for the security management of cross-border data transfers. 

Time 3 Minute Read

The U.S. Supreme Court will soon decide who qualifies as a “consumer” under the federal Video Privacy Protection Act, a 1988 law originally enacted to protect the privacy of individuals’ video rental and purchase records.

Time 7 Minute Read

As we ring in the New Year, one thing remains the same: understanding the definitions and conditions in your insurance policy is critical. In a recent decision, a Florida federal court in Ohio Security Insurance Co. v. E Kelly Enterprises Inc. et al., No. 3:22-cv-24754, held that an insurer had no duty to defend or indemnify a general contractor and no duty to indemnify a subcontractor for damages from defective work on a naval base, based on the policy’s definition of “suit,” “property damage,” and allocation requirements. The decision highlights the importance of numerous issues in the context of commercial general liability policies, including the nuances of policy definitions, obtaining insurer consent when necessary, and allocation between covered and uncovered claims.

Time 1 Minute Read

On December 15, 2025, the Federal Trade Commission announced that it, along with 21 states and the District of Columbia, filed an amended complaint in the U.S. District for the Northern District of California alleging that Uber used unfair and deceptive billing and cancellation practices. 

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Archives

Jump to Page