News & Analysis as of

China › Personal Information › Data Controller

Mayer Brown

China Finalises the Measures for Personal Information Protection Compliance Audits

Mayer Brown on

On 14 February 2025, the Cyberspace Administration of China (“CAC”) issued the “Administrative Measures for Personal Information Protection Compliance Audits” (the "Measures"), which will take effect on 1 May 2025. The...more

DLA Piper

China: Important New Guidance on Defining Sensitive Personal Information

DLA Piper on

While the definition of sensitive personal information in China has always been different to other jurisdictions, with a focus on risk of harm at its heart, new draft guidance should make it easier for organisations to map...more

Pillsbury Winthrop Shaw Pittman LLP

China Issues Rules to Clarify and Relax Cross-Border Data Transfer Controls

Pillsbury Winthrop Shaw Pittman LLP on

A data controller that is not a critical information infrastructure operator that cumulatively exports personal information (excluding any sensitive personal information) of less than 100,000 individuals since January 1 of...more

Fisher Phillips

Transferring Employee or Customer Data Out of China Without Proper Reporting May Have Criminal Consequences: A 4-Step Compliance...

Fisher Phillips on

The compliance grace period for China’s cross-border data security assessment measures has expired — but many international companies with operations or employees in China are still not compliant. In light of the diminishing...more

Cooley LLP

China Releases Standard Contract for Cross-Border Transfer of Personal Information

Cooley LLP on

On February 24, 2023, the Cyberspace Administration of China (CAC) released the final version of the Measures on the Standard Contract for the Cross-Border Transfer of Personal Information, accompanied by a standard contract...more

BCLP

Part 3 of 5: the PIPL and the Personal Information Security Specification

BCLP on

In Part 2 of this series, we discussed how the Personal Information Protection Law (“PIPL”), the centerpiece of China’s personal information (“PI”) protection law, needs to be read in conjunction with other relevant laws,...more

Epiq

Privacy Roundup Part Two: Significant International Updates

Epiq on

Last week’s blog detailed the wave of state legislation that occurred in the U.S. during 2021. It is no surprise that there were also many data privacy developments abroad. It is crucial that organizations affected by...more

Morgan Lewis

Personal Information Protection Law: China’s GDPR Is Coming

Morgan Lewis on

China’s long-awaited Personal Information Protection Law (PIPL), after two rounds of draft versions, was finally passed by the Standing Committee of the National People's Congress on August 20, 2021, with the law effective...more

8 Results
 / 
View per page
Page: of 1

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up Log in
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide