Personal information processors that provide important Internet platform services with a large number of users and complex business types shall perform the following obligations:
(I) Establish and improve the compliance system for personal information protection in accordance with state regulations, and establish an independent organization composed mainly of external members to protect personal information;
(II) Formulate the rules of the platform in accordance with the principles of openness, fairness, and justice, to clarify the norms for the processing of personal information and the obligations of the product or service providers within the platform to protect personal information;
(III) Stop providing services to the product or service providers on the platform that seriously violate laws and administrative regulations in processing personal information;
(IV) Regular release of social responsibility report regarding personal information protection and subject to public supervision.