China Southern Airlines

What this pass recorded. No confirmed public finding this pass, and the framing matters more here than the result. China's Personal Information Protection Law is on paper one of the more demanding privacy statutes in the world, but it operates alongside national security and intelligence laws that oblige Chinese organisations to cooperate with state requests - the same structural point documented in the DeepSeek and Moonshot rows of the LLM Providers tab. For a state-owned airline, the privacy policy governs the company's commercial handling of your data and says nothing meaningful about state access to it, and no contractual term can.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass; China's Personal Information Protection Law (PIPL) applies domestically — a comprehensive law with data-localization requirements distinct from GDPR's model; GDPR applies separately for EU passengers.

Data sharing

Not independently confirmed this pass with a specific named breach or lawsuit.

Contacts

Privacy contact. Not recorded.

Legal notice. PUBLIC COMPANY (Shanghai 600029 / Hong Kong 1055; not an SEC 10-K filer). Service route: corporate secretary, Guangzhou, Guangdong, China — prior text described Southern Company (SO), Atlanta, Georgia — the corporate address on the SEC Form 10-K cover page is the official address of record. Confirm the exact street address on the current 10-K at sec.gov/edgar, and check the state-of-incorporation registered agent (usually Delaware; most large filers use The Corporation Trust Company or Corporation Service Company) via the Secretary of State business-entity search. A registered agent MUST accept service, which is why it is the reliable channel when a company publishes no privacy address.

Mailing address. Not recorded.