On March 22, 2024, following nearly six months after the publication of the Provisions on Promoting and Regulating Cross-border Data Flows (Draft for Solicitation of Comments), the Cyberspace Administration of China (“CAC”)...more
Under China’s data protection regulatory framework, data processors are required to pass a security assessment conducted by the cybersecurity regulator before transferring certain categories or volumes of data out of China....more
On October 29, 2021, the Cyberspace Administration of China ("CAC") published the "Draft Measures on Security Assessment of Cross-Border Data Transfer" ("Draft Measures") for public comment, which outlines the requirements...more
China’s long-waited Personal Information Protection Law (“PIPL”) was finally enacted on August 20, 2021, and will take effect on November 1, 2021. PIPL, which supplements the existing privacy rules established by the...more
All enterprises in China may soon be subject to a new rule governing how they export personal information and important data. Under the draft rules, companies that export data will have to undergo regular self-assessments of...more