New China law tightens hold over user data

BEIJING — China is tightening control over information gathered by companies about the public under a law approved Friday by its ceremonial legislature, expanding the ruling Communist Party’s crackdown on internet industries.

The law would impose some of the world’s strictest controls on private sector handling of information about individuals but appears not to affect the ruling party’s pervasive surveillance or access to those corporate data.

Its passage follows anti-monopoly and other enforcement actions against companies including e-commerce giant Alibaba and games and social media operator Tencent that caused their share prices to plunge.

The law, which takes effect Nov. 1, follows complaints that companies misused or sold customers’ data without their knowledge or permission, leading to fraud or unfair practices.

The law curbs what information companies can gather and sets standards for how it must be stored. The full text wasn’t immediately released, but earlier drafts would require customer permission to sell data to another company.

Alibaba shares lost 2.6% in Hong Kong after news of the law’s passage. Tencent sank after the announcement but ended up 1%. Pinduoduo, an online grocer, was down 1.2% in pre-market trading on the U.s.-based Nasdaq.

The law is similar to Europe’s General Data Protection Regulation, or GDPR, which limits collection and handling of customer data. But unlike laws in Western countries, earlier drafts of the Chinese legislation say nothing about limiting ruling party or government access to personal information.