Enterprise’s User Sensitive Information Protection Obligations Under The Personal Information Protection Law

In the era of big data,a large amount of personal information will be generated in food,clothing,housing and transportation.For various reasons,massive amounts of personal information are collected and used by government agencies,businesses,etc.Among them,the personal information collected and processed by enterprises occupies the main volume.Among the personal information collected and processed,sensitive personal information related to the personal dignity or personal and property safety of the information subject is more important,and enterprises should carry out special protection work.If sensitive personal information is leaked or misappropriated,the enterprise should also bear the corresponding legal responsibility.However,in fact,the work done by enterprises in terms of user sensitive information is not in place,and incidents of illegal collection,illegal processing,and external disclosure of user sensitive information by enterprises frequently occur.In order to constrain companies’ handling of sensitive user information,the "Personal Information Protection Law",which was officially implemented at the end of 2021,initially established a legal system for the protection of sensitive personal information,and ordered infringing companies to bear many legal responsibilities.However,the legal protection of sensitive personal information still faces certain challenges because the relevant norms are mostly principled.Therefore,it is particularly important to improve the user-sensitive responsibility system of enterprises.Focusing on the core theme of the "Personal Information Protection Law",the enterprise’s responsibility for sensitive information of users is analyzed from the perspectives of theoretical research on sensitive information protection in my country,judicial practice and relevant legislative experience outside the territory,and considers how to balance the protection of sensitive personal information with the Utilize and improve the enterprise’s user sensitive information protection obligations,and improve the enterprise’s legal responsibility system for user sensitive information.