The long-awaited China Personal Information Protection Law
(hereinafter referred to as "Law") was passed by the
Standing Committee of the National People's Congress of the
People's Republic of China on August 20, 2021, to enter into
force on November 1, 2021. The law mainly regulates how personal
data will be collected, used, processed, shared, and transferred
abroad by companies operating in the People's Republic of China
(hereinafter referred to as "China"). The Law, which
determines the legal framework in these areas, complements the
local data protection regime previously established by the China
Cybersecurity Law (hereinafter referred to as "CSL") and
national regulations. When the current legal structure of China is
examined, it is seen that the legal and technical measures
regarding the protection of personal data and data security are
implemented through various laws, secondary regulations, and
guidelines containing compliance standards. Herein, the
