The Cyberspace Administration of China (CAC) has released the draft Regulation on the Protection of Children's Personal Information Online for network operators who collect, store, process, use, transfer, or disclose personal information related to children below 14 years. Public comments are invited on this draft by 30 June 2019.

The draft regulation requires network operators to notify and get consent before collecting the personal information of children, set up internal access controls to protect children's information, and appoint a personal information protection officer for children. The draft also outlines the obligations of third-party processors and joint controllers, guidelines for sharing and disclosing children's personal information, the rights of children, and potential penalties for violation.