Companies that store data about users in China are required to cooperate unquestioningly with Chinese surveillance, and must not send the data to anyone outside China without China's approval.

This protects people in China from non-Chinese surveillance and profiling, while making all of them totally vulnerable to China.