China’s top legislative body passed the country’s first Personal Information Protection Law Friday, but has not yet published the final text of the law. State news agency Xinhua said the law will take effect in November. Previous drafts show the law will lay out detailed rules regarding personal data collection. Xinhua said the law orders businesses to allow users to opt out of individualized marketing based on behavior profiles, and to obtain users’ consent when handling sensitive individual information, among other provisions. Businesses and apps will face penalties if they fail to comply. [Xinhua, in Chinese]