Abstract: The personal data protection legislation is closely related to the background of the era in which it is located. The widespread use of Internet, the application of big data and the technological and industrial changes in the artificial intelligence era has made tremendous changes in the requirements for the source, purpose, storage and processing of personal data. The challenges of personal data protection are becoming increasingly severe, and traditional norms are difficult to meet current protection needs. To cope with the big changes and creatively formulate personal data protection rules for future technological, economic, and social development, China's future Personal Information Protection Law should take the following actions:It should fully respond to the development needs of emerging technologies; it should comply with the international trend of data protection, with the point shifting from collection to use, with the protection responsibility shifting from data subject to data controller; it should purposefully draw on the theoretical and practical gains and losses of cutting-edge legislation such as GDPR and CCPA. In view of biometric identification technology and automated decision-making system, while paying attention to the protection of personal privacy, it should also make full use of the industrial advantages of artificial intelligence to open the way for social and economic development.