Following an eventful year, Shi Taige of Jingtian
& Gongcheng reviews the significant developments in
China's data protection landscape for 2022, and ponders its
further evolution in 2023:
- 2022 was a year in which China's data protection
legislation was further refined.
- While focusing on ensuring data security, the Chinese
government also began to recognize and emphasize the value and
utility of data.
- A cross-border data transfer mechanism has finally been
created.
- Sector-specific rules will provide essential guidance
to operators.
In 2022, China's data protection legislation entered a
phase of refinement. The regulatory authorities developed
and issued implementing rules to enforce the data protection
regimes established by the Data Security
Law (DSL) (《数据安全法》) and
the Personal Information Protection Law (PIPL)
(《个人信息保护法》). A
number of developments are worth noting in particular.