China has published a mandatory national standard for data deletion on second-hand electronic products, aiming to reduce the risks of personal information leakage during the circulation and recycling of these devices, according to the country's authorities. According to the Office of the Central Cyberspace Affairs Commission, the regulation aims to standardize technical data deletion methods, guide recycling operators in improving their practices, and prevent information leaks in the used equipment market.
Obligations for manufacturers and recycling operators
The standard, which will take effect on January 1, 2027, stipulates that manufacturers must incorporate built-in data deletion functions into their electronic products. If this is not possible, recycling operators are required to provide external tools to delete the information. They must also proactively remind users of the need to delete their data before device collection and are prohibited from accessing, retaining, or using that information without prior consent.
The regulation also requires that recyclers use devices compatible with data deletion tools, verify the effectiveness of data removal before resale, and ensure that products are not resold or exported if they still contain undeleted information.
Finally, those engaged in recycling must maintain records of deletion operations and verification results for at least three years.
