The New Great Wall is a financial protection framework, not a physical structure
The New Great Wall is a consumer financial protection system launched in China that creates barriers between different types of financial institutions and limits how they can share customer data. Think of it as a set of rules that keeps banks, insurance companies, investment firms, and tech platforms from freely mixing their operations or selling your financial information across industries. If you hold accounts or investments in China, or if you're considering doing business there, understanding how this framework affects data privacy and account security matters to your money.
The system emerged from concerns that large financial companies were creating too much risk by operating across multiple sectors without clear separation. When one part of a conglomerate fails, the New Great Wall rules aim to prevent that failure from cascading through the others — and from putting your accounts at risk in the process.
Key Takeaways
- The New Great Wall separates banking, insurance, and investment operations so that problems in one sector don't automatically spread to your accounts in another.
- Financial institutions must now disclose more clearly when they share your data across different business lines, giving you more visibility into who sees your information.
- If you have money in Chinese banks or investment accounts, the framework provides additional legal protection if a company fails or mishandles your funds.
- The rules explore differently depending on whether you're a retail customer or a business, and whether your accounts are domestic or cross-border.
How the framework separates financial institutions
Under the New Great Wall, a company that operates a bank cannot automatically use that banking license to run an insurance business or investment platform without meeting separate regulatory requirements. This structural separation means each division must maintain its own capital reserves, its own risk management, and its own compliance team. If the insurance arm loses money, it cannot raid the bank's reserves to cover losses.
The separation also applies to data. A bank cannot automatically share your account information with the company's investment division or insurance subsidiary without your explicit consent. You may receive separate notices for each business line, and you can refuse to let them share your data even if you use multiple services from the same parent company.
This matters because it reduces systemic risk — the danger that one company's failure spreads through the entire financial system. When institutions are tightly interwoven, one bad decision or market shock can pull down multiple sectors at once. The New Great Wall makes that scenario less likely by forcing companies to prove each division can survive on its own.
What changes for your data and privacy
Before the New Great Wall, large financial conglomerates could move your information between divisions with minimal notification. A bank might share your income and spending patterns with its insurance subsidiary, which would use that data to set your premiums. You might not know it happened.
The framework now requires explicit consent before your data moves between business lines. When you open an account, you receive a notice explaining what data will be collected, who will see it, and how it will be used. If the company wants to share it with another division, they must ask you separately — and you can say no without losing your primary account.
Companies must also tell you how long they keep your data and what they do with it after you close your account. If you request deletion, they have a legal obligation to remove it within a set timeframe, with limited exceptions for regulatory record-keeping.
How this affects account security and fund protection
The New Great Wall strengthens the legal separation between your deposits and a company's other business activities. If a bank's investment division makes risky trades and loses money, those losses cannot be covered by taking funds from the deposit accounts. Your savings account is protected separately from the company's trading losses.
Each division must also maintain its own insurance or may provide fund. Deposits in the banking division are covered by the deposit insurance scheme up to the legal limit. Insurance products sold by the insurance division are covered by the insurance may provide fund, which is separate. This dual protection means you don't lose coverage if one part of the company fails.
If a company does fail, the regulatory authority handling the failure must treat each division as a separate entity. Your bank account is resolved through the banking regulator, your insurance claims through the insurance regulator, and your investments through the securities regulator. This prevents one regulator's decisions from affecting your money held elsewhere.
Different rules for retail customers versus businesses
The New Great Wall applies more strictly to retail customers — individual people with personal accounts — than to large businesses or institutional investors. This is intentional: regulators assume individuals have less ability to research and negotiate terms, so they receive stronger protections.
If you hold a personal bank account, the data-sharing rules are strict and require your consent. If you hold a business account or operate as a sole proprietor, the rules are more flexible. You may be able to negotiate data-sharing terms directly with the institution, and some consent requirements are waived for business customers.
Cross-border accounts — money you hold in China but access from outside the country — fall under additional rules. The framework requires extra documentation to verify your identity and the source of your funds, which can slow down transfers but provides additional protection against fraud and money laundering.
What happens if a financial company violates the New Great Wall
Violations carry penalties that increase with severity. A company that shares your data without consent may face fines, mandatory notification to affected customers, and orders to delete the improperly shared information. Repeated violations can result in license suspension or revocation, meaning the company loses the right to operate that business line.
If a violation causes you financial harm — for example, if unauthorized data sharing leads to fraud or identity theft — you have the right to seek compensation through the company's complaint process or through small claims court. The burden of proof is on the company to show it acted properly, not on you to prove it acted wrongly.
Regulators also conduct regular audits of large financial institutions to check for New Great Wall compliance. These audits are public, so you can review whether a company you use has been cited for violations in the past.
How to check if a company follows the New Great Wall framework
Start by reviewing the company's privacy policy and data-sharing disclosure. These documents should clearly state which business lines exist, what data each one collects, and whether they share information with each other. If the policy is vague or doesn't mention separate divisions, contact the company's customer service and ask for clarification.
You can also check the company's regulatory filings. Major financial institutions must publish annual compliance reports that detail how they structure their divisions and how they handle customer data. These reports are often available on the company's website or through the relevant regulator's database.
If you're opening a new account, ask the institution directly whether it operates under the New Great Wall framework and what that means for your specific account type. Ask whether your data will be shared with other divisions, and request that they document your consent preferences in writing.
Frequently Asked Questions
Does the New Great Wall explore to me if I'm not in China?
If you hold accounts only outside China, the framework doesn't directly explore. However, if you have money in Chinese banks, investment accounts, or insurance products, or if you're a Chinese citizen with domestic accounts, the rules protect you. Some international banks with Chinese divisions also follow similar separation rules for compliance purposes.
Can a company refuse to let me opt out of data sharing?
No. You have the right to refuse data sharing between divisions for most purposes. The only exceptions are when sharing is required by law for anti-money-laundering or fraud prevention. Even then, the company must notify you and limit sharing to what the law requires.
What happens to my data if the company goes out of business?
The regulator handling the company's failure will transfer your account to another institution or return your funds according to the protection scheme that covers your account type. Your data follows your account. You have the right to request deletion of data that isn't needed for the transfer or for regulatory record-keeping.
Does the New Great Wall protect me from fraud by the company itself?
The framework reduces the risk that fraud in one division spreads to others, but it doesn't prevent fraud from happening. If an employee commits fraud, you have recourse through the company's complaint process and through law enforcement. The structural separation means the company's other divisions can't be used to hide or cover up the fraud.
How do I know if my data was shared without consent?
Companies must notify you if they discover unauthorized data sharing. If you suspect it happened, contact the company's data protection officer or compliance department and request a report of all data sharing involving your account. They must respond within 30 days. If you find unauthorized sharing, you can file a complaint with the financial regulator.