106 Legal regulation of personal information security in China... personal information protection are justified and necessary. However, the six regulations on personal information protection in the China's Civil Code are not fit to cope with various kinds of infringements in the big data era. The Criminal Law of the People's Republic of China is not capable in all aspects to crack down on the acts of infringing upon the information security of citizens. The Criminal Law as the " ultima ratio " is not fully applicable to cases related to personal information security, while the legal regulations in the departmental laws and related law interpretations lack both systematization and integration. In the big data era, scholars and citizens eagerly looking forward to the early promulgation of the unified Personal Information Protection Law of the People's Republic of China. Meanwhile, attention should be also paid to promoting the progress of the selfdiscipline mechanism of the industry, to coordinate the comprehensive protection of legislation with the protection of the self- discipline mechanism for personal information and to guarantee the free development of science and technology and the free circulation of information in the big data era. The aim is to perfect protection of the personal information rights of the information subjects.