With the development of information society, the legal protection of ecommerce users’ information is facing new problems. Presently, the legislation on the protection of ecommerce users’ information has made some progress, but it is still caught in the dilemma of being not systematic,specific,or comprehensive.On this issue Electronic Commerce Law (Draft) has made some breakthroughs,but it is still flawed and needs to be further improved so as to protect ecommerce users’information security effectively.