Chapter V Obligations of Personal Information Processors
Article 55
Translation Notice
This is an unofficial English translation prepared for general informational purposes only. It does not constitute legal advice. In case of any discrepancy, the official Chinese text published by the competent authority shall prevail.
本文为非官方英文翻译，仅供一般信息参考，不构成法律意见。如与主管机关发布的中文正式文本不一致，以中文正式文本为准。
Chinese Original
第五十五条 有下列情形之一的，个人信息处理者应当事前进行个人信息保护影响评估，并对处理情况进行记录： （一）处理敏感个人信息； （二）利用个人信息进行自动化决策； （三）委托处理个人信息、向其他个人信息处理者提供个人信息、公开个人信息； （四）向境外提供个人信息； （五）其他对个人权益有重大影响的个人信息处理活动。
English Translation
In any of the following circumstances, a personal information processor shall conduct a personal information protection impact assessment in advance and record the processing: (1) processing sensitive personal information; (2) using personal information for automated decision-making; (3) entrusting the processing of personal information, providing personal information to another personal information processor, or publicly disclosing personal information; (4) providing personal information outside the territory; or (5) other personal information processing activities that have a significant impact on personal rights and interests.
Plain English Note
Site explanation only. Not part of the translation.
Article 55 specifies when a personal information protection impact assessment must be conducted before processing.