Mainland China is one of the few remaining major markets in Asia without a comprehensive law regulating the use and handling of personal information. Data privacy is governed by way of a regime consisting of the constitution, criminal law, civil law, tort law and some sector-specific regulations.