Abstract: According to the relevant provisions on the protection of sensitive personal information in the Civil Code of the People’s Republic of China and Personal Information Protection Law of the People’s Republic of China, four legal issues are put forward on the protection of sensitive personal information in the context of data sharing, including legal principles, criteria, informed consent and compensation for mental damage. Suggestions are made from three perspectives of improving legal norms, government supervision and industry self-discipline by drawing on the European Union’s General Data Protection Regulation, German’s Federal Data Protection Act and relevant laws from the USA.

Key words: data sharing, sensitive personal information, sensitive personal information protection