Chapter II Rules for Processing Personal Information
Article 13
Translation Notice
This is an unofficial English translation prepared for general informational purposes only. It does not constitute legal advice. In case of any discrepancy, the official Chinese text published by the competent authority shall prevail.
本文为非官方英文翻译，仅供一般信息参考，不构成法律意见。如与主管机关发布的中文正式文本不一致，以中文正式文本为准。
Chinese Original
第十三条 符合下列情形之一的，个人信息处理者方可处理个人信息： （一）取得个人的同意； （二）为订立、履行个人作为一方当事人的合同所必需，或者按照依法制定的劳动规章制度和依法签订的集体合同实施人力资源管理所必需； （三）为履行法定职责或者法定义务所必需； （四）为应对突发公共卫生事件，或者紧急情况下为保护自然人的生命健康和财产安全所必需； （五）为公共利益实施新闻报道、舆论监督等行为，在合理的范围内处理个人信息； （六）依照本法规定在合理的范围内处理个人自行公开或者其他已经合法公开的个人信息； （七）法律、行政法规规定的其他情形。 依照本法其他有关规定，处理个人信息应当取得个人同意，但是有前款第二项至第七项规定情形的，不需取得个人同意。
English Translation
A personal information processor may process personal information only where one of the following circumstances is met: (1) the individual's consent has been obtained; (2) the processing is necessary for concluding or performing a contract to which the individual is a party, or is necessary for human resources management carried out under labor rules formulated in accordance with law and collective contracts concluded in accordance with law; (3) the processing is necessary for performing statutory duties or statutory obligations; (4) the processing is necessary to respond to a public health emergency or, in an emergency, to protect the life, health, or property safety of natural persons; (5) personal information is processed within a reasonable scope for news reporting, public opinion supervision, or similar activities carried out in the public interest; (6) personal information that has been disclosed by the individual or otherwise lawfully disclosed is processed within a reasonable scope in accordance with this Law; or (7) other circumstances provided by laws or administrative regulations. Where other provisions of this Law require individual consent for processing personal information, consent is not required if any of the circumstances in items (2) through (7) of the preceding paragraph applies.
Plain English Note
Site explanation only. Not part of the translation.
Article 13 lists the statutory bases for processing personal information. Consent is only one basis; several statutory exceptions do not require consent.