News & Analysis as of

China › Data Controller › Data Security

Mayer Brown

China Finalises the Measures for Personal Information Protection Compliance Audits

Mayer Brown on

On 14 February 2025, the Cyberspace Administration of China (“CAC”) issued the “Administrative Measures for Personal Information Protection Compliance Audits” (the "Measures"), which will take effect on 1 May 2025. The...more

Lathrop GPM

New DOJ Limits on Cross-Border Data Transfers Prompt Assessment by Businesses

Lathrop GPM on

On April 8, the National Security Division of the U.S. Department of Justice’s (DOJ) new rule on cross-border data transfers takes effect. It restricts U.S. businesses from transferring certain bulk sensitive personal data to...more

DLA Piper

China: Important New Guidance on Defining Sensitive Personal Information

DLA Piper on

While the definition of sensitive personal information in China has always been different to other jurisdictions, with a focus on risk of harm at its heart, new draft guidance should make it easier for organisations to map...more

K&L Gates LLP

Safe Harbors Part II - China's Safe Harbor Rules Lower the Barrier for Cross-Border Data Transfer

K&L Gates LLP on

In Part I of our alert about China’s new safe harbor rules, we discussed key developments between the draft Provisions on Regulating and Facilitating Cross-Border Data Flow (Chinese version only) and the Provisions on...more

K&L Gates LLP

Safe Harbors Part I – From Regulating to Facilitating: Key Developments in China's Safe Harbor Rules

K&L Gates LLP on

Six months after the Cyberspace Administration of China (the CAC) sought public consultation on the draft Provisions on Regulating and Facilitating Cross-Border Data Flow (the Draft Provisions, Chinese version only), the...more

Pillsbury Winthrop Shaw Pittman LLP

China Issues Rules to Clarify and Relax Cross-Border Data Transfer Controls

Pillsbury Winthrop Shaw Pittman LLP on

A data controller that is not a critical information infrastructure operator that cumulatively exports personal information (excluding any sensitive personal information) of less than 100,000 individuals since January 1 of...more

Fisher Phillips

7 Steps to Success: China Releases New Guidelines on Standard Contracts for Exporting Personal Information

Fisher Phillips on

Chinese government data privacy officials recently implemented Guidelines for Filing of Standard Contracts for Export of Personal Information that carry significant consequences for non-compliance – which means organizations...more

Fisher Phillips

Transferring Employee or Customer Data Out of China Without Proper Reporting May Have Criminal Consequences: A 4-Step Compliance...

Fisher Phillips on

The compliance grace period for China’s cross-border data security assessment measures has expired — but many international companies with operations or employees in China are still not compliant. In light of the diminishing...more

K&L Gates LLP

The CAC Assessment Collection – Part 3: Steps and Timeline of a CAC Assessment

K&L Gates LLP on

In our previous posts, we discussed what data export activities are subject to scrutiny assessment (CAC Assessment) conducted by the Cyberspace Administration of China (CAC) (see Part 1) and examined what companies must do...more

K&L Gates LLP

The CAC Assessment Collection – Part 1: What You Should Consider Before Exporting Data From China

K&L Gates LLP on

With the rapid development of the global digital economy, multinational companies (MNCs) have been forced to find legally compliant ways to transfer data across borders. In the past, many MNCs relied on data transfer...more

Benesch

China Data Transfer Mechanisms and Requirements Come into View as Security Assessment and Technical Certification Measures...

Benesch on

The transfer mechanisms drive home China’s focus on data localization, as the measures all set forth cumbersome procedures and requirements, including security assessments and required contractual considerations. Despite...more

BCLP

Part 3 of 5: the PIPL and the Personal Information Security Specification

BCLP on

In Part 2 of this series, we discussed how the Personal Information Protection Law (“PIPL”), the centerpiece of China’s personal information (“PI”) protection law, needs to be read in conjunction with other relevant laws,...more

Epiq

Privacy Roundup Part Two: Significant International Updates

Epiq on

Last week’s blog detailed the wave of state legislation that occurred in the U.S. during 2021. It is no surprise that there were also many data privacy developments abroad. It is crucial that organizations affected by...more

Morgan Lewis

Impact of Recent China Data Protection Laws on Asian Life Sciences Industry

Morgan Lewis on

Multinational pharmaceutical companies, by nature of their business, handle a great deal of data, often transferred across borders, whether based on research, clinical trial data, and employee personal data....more

14 Results
 / 
View per page
Page: of 1

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up Log in
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide