Legal basis: Regulations on the Administration of Credit Information Industry
Twenty-second credit institutions shall, in accordance with the provisions of the supervision and administration department of the State Council credit industry, establish and improve and strictly implement the rules and regulations to ensure information security, and take effective technical measures to ensure information security. A credit reporting agency engaged in personal credit reporting business shall clarify the authority and procedures for its staff to inquire about personal information, register the staff to inquire about personal information, and truthfully record the staff's name, inquiry time, content and purpose. Staff members shall not query information in violation of the prescribed authority and procedures, and shall not disclose the information obtained in their work.
Twenty-third credit institutions should take reasonable measures to ensure the accuracy of the information they provide. The information provided by credit reporting agencies is for information users' reference only.
Article 24 The collation, preservation and processing of information collected by credit reporting agencies within the territory of China shall be conducted within the territory of China. When providing information to overseas organizations or individuals, credit reporting agencies shall abide by laws, administrative regulations and the relevant provisions of the supervision and administration department of credit reporting industry in the State Council.