Official guidance has expanded the scope of laws and provided examples of illegal uses.

Key Points:

..The definition of “personal information” has been expanded to include data points used for tracking individuals through trails of activity.

..Certain misconduct by companies or individuals that breaches the Network Security Law with aggravating circumstances may lead to criminal liability including imprisonment of up to seven years and/or an unspecified fine.

..Aggravating circumstances for criminal offenses have also been clarified.