China Is Entering A New Era In Data Protections

On November 1, 2021, the Personal Information Protection Law of the People's Republic of China (the "PRC") (the "Personal Information Protection Law") went into effect, two months after the Data Security Law of the PRC (the "Data Security Law") went into effect. The Data Security Law and the Personal Information Protection Law are two key pieces of legislation in the field of information security following the adoption of Cyber Security Law of the PRC (the "Cybersecurity Law") in June 2017. The Data Security Law lays down the regulatory framework and principles of data protections and sets the tone for administrative rules and regulations which are being formulated by Chinese regulators to implement the law. The Personal Information Protection Law establishes the principal legal basis for collecting and processing personal information and consolidates the personal data protection rules previously scattered across different laws and regulations. The Data Security Law