In recent months, the Cyberspace Administration has taken a number of steps against irregularities in collecting personal data.

This month, more than 100 apps, including those used for navigation, security and online loans, have been ordered not to collect users' data without permission. They have also been told they cannot obtain personal information that has nothing to do with the services they offer.

Last month, the Ministry of Industry and Information Technology announced a rule on the management of personal data protection on apps, with the public asked to share ideas and offer advice before May 26.

In addition, a draft amendment to the regulation in Hangzhou makes it clear that community management departments should not force residents to obtain entry through facial recognition. This is reportedly the first local regulation on the use of such technology to be introduced nationwide.

Answers sought

With legislative and administrative measures on the collection of personal information being accelerated, legislator Li Wei said deleting such data that has been collected should be further considered, especially with the pandemic being contained in China.

"To help keep the COVID-19 outbreak in check, almost everyone has had their personal data collected and used. I think several questions, such as how long the data needs to be kept and when the information can be destroyed, should be answered. Otherwise, people will feel unsafe and face data security risks when the pandemic ends," he said.

Feng Dan, an NPC deputy, said: "Residents have provided personal information to help and support many government agencies, including hospitals and parking administrations, to efficiently trace cases of infection. However, there have been no rules on deleting the data after the pandemic," she said, adding that this is just as important as obtaining the information.

Zhao Zhanling, a lawyer at the Beijing Yujia Law Firm, suggested the country give residents the right to apply for the destruction of their personal information if they cancel accounts with apps.

He called for cyberspace administrators to play a supervisory role to ensure personal data can be effectively removed from apps.

"For example, the top internet watchdog can inspect app operators randomly or organize campaigns to see whether users' requests for the removal of personal data are being met," he added.