Share on LinkedInShare on LinkedIn

ARTICLE · 15 AUGUST 2023

China Publishes Draft Rules For Personal Information Protection Compliance Audits

WilmerHale
WilmerHale
Contributor
WilmerHale

WilmerHale

WilmerHale's London office was established more than 40 years ago. With lawyers qualified in the...

View firm profile
Explore more from WilmerHale

The Cyberspace Administration of China ("CAC") on August 3, 2023 published the draft Administrative Measures for Personal Information Protection Compliance Audits ("draft Measures") for public...

ChinaAccounting and Audit

The Cyberspace Administration of China ("CAC") on August 3, 2023 published the draft Administrative Measures for Personal Information Protection Compliance Audits ("draft Measures") for public comment through September 2, 2023.1 The draft Measures, if adopted in their current form, would serve as a guideline to implement and manage compliance audits for personal information processors (PI Processors) required under the Personal Information Protection Law ("PIPL").

Under the PIPL, a PI Processor is defined as "entities and individuals that independently determine the purpose and method of PI processing activities". PI Processor here refers generally to domestic entities or individuals. PI Processors are obligated to either (i) regularly conduct compliance audits on its handling of personal information (PIPL, Article 54), or (ii) if CAC or other relevant departments find that there are high risks in PI processing activities or if PI security incidents have

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from