This makes sense given that the guidelines in current form are meant to apply only to data on information technology systems rather than hard-copy storage, with portal providers receiving and making use of some of the heaviest volume of customer data in China.