Chapter VII Legal Liability
Article 66
Translation Notice
This is an unofficial English translation prepared for general informational purposes only. It does not constitute legal advice. In case of any discrepancy, the official Chinese text published by the competent authority shall prevail.
本文为非官方英文翻译，仅供一般信息参考，不构成法律意见。如与主管机关发布的中文正式文本不一致，以中文正式文本为准。
Chinese Original
第六十六条 违反本法规定处理个人信息，或者处理个人信息未履行本法规定的个人信息保护义务的，由履行个人信息保护职责的部门责令改正，给予警告，没收违法所得，对违法处理个人信息的应用程序，责令暂停或者终止提供服务；拒不改正的，并处一百万元以下罚款；对直接负责的主管人员和其他直接责任人员处一万元以上十万元以下罚款。 有前款规定的违法行为，情节严重的，由省级以上履行个人信息保护职责的部门责令改正，没收违法所得，并处五千万元以下或者上一年度营业额百分之五以下罚款，并可以责令暂停相关业务或者停业整顿、通报有关主管部门吊销相关业务许可或者吊销营业执照；对直接负责的主管人员和其他直接责任人员处十万元以上一百万元以下罚款，并可以决定禁止其在一定期限内担任相关企业的董事、监事、高级管理人员和个人信息保护负责人。
English Translation
Where personal information is processed in violation of this Law, or where the personal information protection obligations provided by this Law are not performed in processing personal information, the departments performing personal information protection duties shall order correction, issue a warning, confiscate unlawful gains, and order applications that unlawfully process personal information to suspend or terminate the provision of services. If correction is refused, a fine of not more than RMB 1,000,000 shall also be imposed; the directly responsible person in charge and other directly responsible personnel shall be fined not less than RMB 10,000 and not more than RMB 100,000. Where the unlawful conduct provided in the preceding paragraph is serious, the departments performing personal information protection duties at or above the provincial level shall order correction, confiscate unlawful gains, and impose a fine of not more than RMB 50,000,000 or not more than five percent of the preceding year's turnover. They may also order suspension of relevant business or suspension of business for rectification, notify relevant competent departments to revoke relevant business permits or revoke the business license, and impose a fine of not less than RMB 100,000 and not more than RMB 1,000,000 on the directly responsible person in charge and other directly responsible personnel. They may also decide to prohibit such persons from serving as directors, supervisors, senior managers, or persons in charge of personal information protection of relevant enterprises for a certain period.
Plain English Note
Site explanation only. Not part of the translation.
Article 66 sets the main administrative penalty framework, including high fines for serious violations.