Under the draft rules, those collecting personal information will be responsible for assessing the information's legality, legitimacy, and necessity of purpose, its scope and whether it will remain protected overseas once it is exported. The draft also covers methods of handling personal information by domestic processors and overseas recipients.
(Reporting by Casey Hall; Editing by Raissa Kasolowsky)
