Definition of the Scope of Sensitive Personal Information

Abstract

The definition of the scope of sensitive personal information is crucial for the scope of data collection, but in China, the scope of sensitive personal information does not be clearly defined. Although Article 28 of the Personal Information Protection Law defines the scope of sensitive personal information to a certain extent through the method of "listing and summarizing", it is difficult to apply it in practice. Plus, it is inappropriate to simply classify information into general personal information and sensitive personal information. To identify sensitive personal information properly, we must consider specific scenarios, adopt the scenario integration path which is based on contextual integrity theory to establish objective criteria for determining whether the information is sensitive.