Other

Baidu Maps

Baidu Maps (百度地图) is the leading mapping platform in mainland China, operated by Baidu. It offers interactive maps, geocoding, routing and point of interest search via a JavaScript SDK and a REST API.

Overview

What does Baidu Maps do?

Baidu Maps (百度地图) is the leading mapping platform in mainland China, operated by Baidu. It offers interactive tiles, satellite imagery, geocoding, routing and points of interest search through a JavaScript SDK and REST APIs. European businesses that target Chinese tourists, expats or local customers often embed Baidu Maps because Google Maps is not accessible from mainland China.

What Baidu Maps does

The JavaScript SDK is loaded from api.map.baidu.com with a developer key. It renders an interactive map, requests tiles, performs geocoding and reverse geocoding, calculates routes for driving, walking and public transport, and exposes search for places. The API also covers heatmaps, drawing tools and panoramic imagery.

Cookies and data collected

Loading the Baidu Maps SDK can set cookies on baidu.com (BAIDUID, BIDUPSID, PSTM, BDORZ) used for cross site identification across the Baidu ecosystem. The service receives the IP, user agent, referrer, the coordinates or addresses looked up, the displayed map area and, if the user authorises Geolocation, precise GPS coordinates.

GDPR and ePrivacy implications

IP and geolocation are personal data. The SDK loads a third party script and sets cookies on baidu.com, which is not strictly necessary, so Article 5(3) ePrivacy and Article 6(1)(a) GDPR require prior consent. Baidu acts as an independent controller for its own search and advertising purposes in addition to any processor role for the embed.

Data transfers to China

All Baidu Maps data goes to Baidu servers in mainland China. China has no EU adequacy decision. Transfers therefore require Article 46 safeguards (SCCs) and a Transfer Impact Assessment that addresses Chinese state access under PIPL, the Cybersecurity Law and the Data Security Law. Baidu has not published EU SCCs for Baidu Maps, which makes lawful deployment very challenging.

How to embed it compliantly

Use a click to load placeholder mentioning Baidu, China and the transfer mechanism. Block the SDK by default in your CMP, load it only after consent. Restrict the embed to pages dedicated to a Chinese audience. For European audiences, replace Baidu Maps with MapTiler, Mapbox EU or OpenStreetMap. Document the legal mechanism in your record of processing activities.

Compliance

Baidu Maps and the GDPR

Baidu Maps is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive)
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, PIPL, Schrems II case law

Impact assessment (DPIA)

A DPIA is strongly recommended for any deployment of Baidu Maps targeting European users. The service combines IP, geolocation, identifier cookies, and a transfer to mainland China where Baidu is subject to broad state access powers. Document the legal basis, SCC mechanism, TIA, and supplementary measures such as proxying or restricting the embed to specific pages.

Sample text for your banner

We embed Baidu Maps to show interactive maps for our Chinese audience. Baidu Maps processes your IP and approximate location on servers in China. We only load it after you accept the maps and embeds category in our cookie banner.
Cookies and trackers

What Baidu Maps sets and contacts

Tracking method
JavaScript SDK (api.map.baidu.com), tile and geocoding requests over HTTPS, first party and third party cookies on baidu.com
Server location
China (operated by Baidu, mainland data centres)
Data transferred outside the EU
Baidu Maps is operated by Baidu from mainland China. Tile requests, geocoding, routing and search queries are processed in China. China is not on the EU adequacy list and is subject to broad state access powers under PIPL, the Cybersecurity Law and the Data Security Law.

Cookies set (4)

NameTypeDurationPurpose
BAIDUIDhttp_cookie2 yearsPersistent identifier set by Baidu across the .baidu.com domain, used for cross site recognition and personalisation in the Baidu ecosystem.
BIDUPSIDhttp_cookie2 yearsStable identifier used together with BAIDUID for Baidu account recognition.
PSTMhttp_cookie2 yearsTimestamp of the first visit to Baidu, used for analytics and audience measurement.
BDORZhttp_cookie30 minutesShort lived cookie used by Baidu for fraud and bot prevention on map and search requests.

Third-party domains contacted (4)

  • api.map.baidu.com
  • map.baidu.com
  • sp0.baidu.com
  • sp1.baidu.com
Questions

Frequently asked questions about Baidu Maps

Can't find your question? Write to us, we answer fast.

What cookies does Baidu Maps set?

Loading the Baidu Maps SDK can set cookies on baidu.com (BAIDUID, BIDUPSID, PSTM, BDORZ) used for cross site identification across the Baidu ecosystem. They are third party from the perspective of a European publisher and persist for months to years.

Does Baidu Maps require GDPR consent?

Yes. The SDK loads a third party script, sets identifier cookies and processes IP and potentially precise geolocation. Article 5(3) ePrivacy and Article 6(1)(a) GDPR require prior consent.

What is the legal basis for processing?

Consent under Article 6(1)(a) GDPR is the appropriate basis. Legitimate interest is not viable given the China transfer and the role of Baidu as an independent controller for its own search and advertising purposes.

Are data transferred outside the EU?

Yes. All requests reach Baidu servers in mainland China. China has no EU adequacy decision. Transfers require SCCs and a Transfer Impact Assessment, very difficult to pass given Chinese state access powers.

Do I need a DPIA?

A DPIA is strongly recommended. Baidu Maps combines IP, identifier cookies, potential precise geolocation, and a transfer to a third country without adequacy. Multiple EDPB criteria apply.

How do I embed Baidu Maps compliantly?

Use a click to load placeholder mentioning Baidu, China and the transfer. Gate the SDK behind consent in your CMP. Restrict the embed to pages dedicated to Chinese audiences. Document the legal mechanism in your record of processing activities.

Are there alternatives to Baidu Maps?

For European audiences, consider Mapbox (EU region), MapTiler, OpenStreetMap, HERE Maps, Google Maps, or self hosted vector tiles. Reserve Baidu Maps for cases that truly require mainland China coverage.

How do I update my cookie policy for Baidu Maps?

Add Baidu Maps to your cookie table with the relevant cookies (BAIDUID, BIDUPSID, PSTM, BDORZ) and their lifetimes. Add a section explaining the international transfer to China, the legal mechanism, and the right to withdraw consent.

SugarWOD

SugarWOD is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. SugarWOD supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, SugarWOD ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Other

Campflow

Campflow is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Campflow supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Campflow ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

keep. archeevo

keep. archeevo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. keep. archeevo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, keep. archeevo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

RUAL

Rual is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Rual supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Rual enables informed decisions that improve experience and drive results.

Analytics

TeamLinkt

TeamLinkt is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. TeamLinkt integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, TeamLinkt helps organizations maintain robust websites that meet user expectations and technical requirements.

Other

Gitiles

Gitiles is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Gitiles offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Gitiles empowers organizations to optimize strategy and maximize return on investment.

Analytics

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.