Gateway To Privacy: China Data Transfers And What You Need To Know (Podcast)

China's cross-border data transfer regime has moved from paper framework to active enforcement in 2026, with regulators issuing significant fines and new rules for both small and large data processors. The three-pathway framework of CAC security assessment, Standard Contract filing, and personal information protection certification is now fully operational, creating real compliance obligations for any business moving personal data out of China.

对于因开展业务等而需要向中国境外提供个人信息的中国境内企业，《个保法》明确提供了上述三条主要合规路径，即通过安全评估、进行个&#

摘要：数据合规已成为数字经济时代科技企业申请上市的最重要的法律关口之一。本文从2021年度最新（申报）上市案例出发，在梳理、分析相关

为持续加强数据出境安全管理政策宣贯，指导和帮助数据处理者高效合规开展数据出境活动，2025年4月9日，国家互联网信息办公室发布...

得益于药品上市许可持有人制度确立、药品审评审批制度改革、专利链接制度...

2022年，一场震惊全球的数据泄露事件将某知名国际网约车公司推上风口浪尖。黑客通过社交工程手段攻破其第三方供应商员工的VPN权限，进而入侵多个内部系统，导致大量员工和司机的姓名、邮箱、位置信息、账户内容等个人数据遭到外泄。事件发生后，美国联邦贸易委员会（FTC）率先发起调查&#

但同时，鉴于数据资产的特性，比如非排他性、价值的不确定性等，亦会导致数据资产在企业财务报表中体现跟计量存在难度，也会由此而使数据

On October 14, 2025, the Cyberspace Administration of China (CAC) and the State Administration for Market Regulation jointly issued the "Measures for Certification of Cross-Border Personal Information Transfer" (hereinafter referred to as the "Measures"), which will take effect on January 1, 2026.

2024年9月30日，中国国务院发布了《网络数据安全管理条例》（以下简称"新条例"）， 新条例有效地整合了不同监管维度下对相关...

总而言之，KOSA与COPPA 2.0在保护对象、合规主体与合规义务方面均引入了大量新内容，这在很大程度上体现了美国立法机构在加强未成年人网络保护方面

On 30 September 2026, the SEC proposed rule amendments advancing Chairman Paul S. Atkins’ “responsible retailization” of private markets, expanding retail access to private-market strategies while adding key investor safeguards.

The EU has introduced its first major amendment to the AI Act through the AI Omnibus regulation, which delays certain compliance deadlines while maintaining others. Organizations must understand which obligations remain on schedule, including transparency requirements and general-purpose AI provisions, and which have been deferred, such as high-risk AI system requirements.

California is implementing a major tax policy shift that will subject software-as-a-service, remotely accessed software, and digital products to sales and use tax beginning January 1, 2027. The California Department of Tax and Fee Administration has proposed emergency regulations establishing sourcing rules, a $5 million threshold that shifts tax liability from retailers to purchasers, and key exemptions for custom software and certain service-based digital products.

The Federal Trade Commission has issued a proposed enforcement policy statement targeting businesses that use consumer personal data to set individualized prices. While acknowledging it cannot prohibit all personalized pricing, the FTC warns that companies may violate federal law if they fail to clearly disclose their use of personal data in pricing decisions.

Texas Senate Bill 140 (SB 140) took effect 1 September 2025, and applies to conduct occurring on or after that date. The bill amended Section 302 of the Texas Business and Commerce Code to extend registration and disclosure requirements to text messages by expanding the definition of “Telephone solicitation,” which previously applied only to a “telephone call,” to include certain transmissions of text or graphic messages and images. In addition, SB 140 added a definition of “Telephone call” that incorporates the definition found in Section 304, which includes certain text or graphic messages and images, but excludes certain agreed-to transmissions.

The SEC and CFTC have issued coordinated regulatory relief measures that significantly advance crypto-based trading infrastructure in US markets, bypassing Congressional gridlock on the CLARITY Act. These orders establish new frameworks for tokenized securities venues and passive software providers, potentially reshaping how digital assets are traded and accessed in regulated markets.

China's stock exchanges have implemented three major trading rule changes effective July 6, 2026, designed to enhance market quality and align practices with international standards. The reforms expand after-hours trading, modify public fund pricing mechanisms, and adjust price limits for risk-warning stocks. How will these structural changes impact institutional investors, ETF efficiency, and overall market participation in China's evolving capital markets?

Venezuela's post-Maduro reopening is creating unprecedented opportunities for foreign investors across energy, mining, telecommunications, and infrastructure sectors. With expanding OFAC sanctions relief, landmark legislative reforms, and major US companies nearing multibillion-dollar deals, the country presents investment prospects not seen in a generation—though success requires disciplined navigation of corruption, security, and regulatory risks.

The European Commission has issued guidelines on transparency obligations under Article 50 of the EU AI Act, clarifying how providers and deployers must inform individuals when they interact with AI systems or are exposed to AI-generated content. These non-binding guidelines address a wide range of AI applications, from chatbots to deepfake technologies, and establish four main transparency scenarios with specific disclosure requirements that businesses must now prepare to implement.

The European Union Authority for Anti-Money Laundering and Countering the Financing of Terrorism has finalised three sets of Regulatory Technical Standards...