Under China’s data protection regulatory framework, data processors are required to pass a security assessment conducted by the cybersecurity regulator before transferring certain categories or volumes of data out of China....more
The regulatory landscape in China around data protection and flows continues to develop. Since the 2017 Cybersecurity Law, China has been refining the legal and regulatory framework for data protection—it has implemented new...more
On October 29, 2021, the Cyberspace Administration of China ("CAC") published the "Draft Measures on Security Assessment of Cross-Border Data Transfer" ("Draft Measures") for public comment, which outlines the requirements...more
China’s long-waited Personal Information Protection Law (“PIPL”) was finally enacted on August 20, 2021, and will take effect on November 1, 2021. PIPL, which supplements the existing privacy rules established by the...more
On April 29, 2021, the national legislator in China released the second draft of the Personal Information Protection Law (“PIPL”) to collect public comments until May 28, 2021. The updated draft substantially follows the...more
All enterprises in China may soon be subject to a new rule governing how they export personal information and important data. Under the draft rules, companies that export data will have to undergo regular self-assessments of...more
The National People's Congress Standing Committee has now finalised the new Cyber Security Law ("CSL"), to take effect on 1 June 2017. The fast development of the internet in China has caused a rapid escalation of security...more