Compliance Checklist For China's Personal Information Protection Law

Are you on track for compliance with the Personal Information Protection Law of China?

The long-expected and widely concerned Personal Information Protection Law of China (the "PIPL") was adopted on 20 August 2021 by the Standing Committee of National People's Congress. This landmark data protection regulation will come into effect on November 1, 2021. As a basic law for personal information protection in China, the PIPL clarifies the rules for processing personal information, the obligations of personal information handlers, and the rights of personal information subjects. Notably, the PIPL provides serious punishment for violations of this law, which includes a fine of up to CNY 50 million (approx. USD 7.7 million) or 5% of annual turnover of the previous year.