You have the right to view, copy, correct, and delete your personal information; if refused, you can sue
Grade AMedium benefitFreedomFreeLittle timeSome willpower
You may require a company to let you view, copy, correct, and delete your information. When service stops, retention periods end, or you withdraw consent, the company should delete on its own. If it refuses you, it must state the reason; if it still will not act, you can sue in court. Closing an account and deleting personal information are two steps; after closing the account you must request deletion separately.
- Cost
- No cost. You only need to complain or sue if the other party stalls. A real lawsuit starts at several months, and you pay your own lawyer fees, so complaining first is usually better value. The hard part is following up when they drag their feet.
- Benefit
- In several situations the company must delete proactively: service stopped, agreed retention period ended, you withdrew consent, the original collection purpose was achieved, and so on. If it did not delete, you may demand deletion. If it refuses your exercise of these rights, it must state the reason. You may sue directly in court
- Notes
- Closing an account and deleting personal information are separate; after closing, request deletion separately. Before changing phones or selling an old phone, sign out of all accounts and unlink them on the old device, then factory reset. The law gives you a post-hoc deletion right; it cannot claw back what already leaked.
Sources · 1
- 全国人大常委会 (2021). 个人信息保护法. 中国人大网. npc.gov.cn/npc/c2/c30834/202108/t20210820_313…:第四十五条「个人有权向个人信息处理者查阅、复制其个人信息……个人请求查阅、复制其个人信息的,个人信息处理者应当及时提供」;第四十六条更正、补充权;第四十七条列了五种应当主动删除的情形,含「(一)处理目的已实现、无法实现或者为实现处理目的不再必要」「(二)个人信息处理者停止提供产品或者服务,或者保存期限已届满」「(三)个人撤回同意」,「个人信息处理者未删除的,个人有权请求删除」;第五十条「个人信息处理者应当建立便捷的个人行使权利的申请受理和处理机制。拒绝个人行使权利的请求的,应当说明理由」「个人可以依法向人民法院提起诉讼」