New China Cybersecurity and Data Privacy Requirements

The rapid development of social informatization and the arrival of digital era have made personal information the most important type of data assets in the cyberspace. The Personal Information Protection Law of the People's Republic of China (PIPL) has taken effect on November 1, 2021 and this law has attracted wide attention for being one of the most important laws of China while the country is entering the digital era. The PIPL, together with the Cybersecurity Law and the Data Security Law, form the foundation of the data protection and cybersecurity legal regime in China.

How to collect and process personal data in compliance with the laws and regulations, how to achieve the legitimate and effective cross-border data transfer and protection, and how to respond and take effective measures are the major compliance issues that enterprises have to face. We will discuss key compliance requirements and significant business implications and share our practical insights.