ARTICLE · 28 SEPTEMBER 2021
China's Stringent Data Law Will Become Effective Soon
On August 20, 2021, the Personal Information Protection Law (PIPL), regarded as China's GDPR, was signed into law, and will become effective on November 1, 2021.
On August 20, 2021, the Personal Information Protection
Law (PIPL), regarded as China's GDPR, was signed into law,
and will become effective on November 1, 2021. The PIPL supplements
China's Cybersecurity Law and the Data Security Law, expanding
China's legal framework for the protection and regulation of
data security and personal information. The PIPL has an
extraterritorial scope, imposing broad disclosure, consent, and
cross-border transfer obligations on organizations that provide
products or services to or analyze activities of people within
China.
Notable requirements of the PIPL include:
- Separate Consent Scenarios. The PIPL requires
companies to obtain individuals' separate consent for
processing in several scenarios, including (i) when sharing
information with third parties, (ii) processing sensitive personal
information, and (iii) transferring data outside of China.
We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.
The content of this article is intended to provide a general guide
to the subject matter. Specialist advice should be sought about your
specific circumstances.
View source
