With online data privacy protection not having been a priority
for too long, companies should be aware that China is now stepping
up its game with the new Data Security Law (DSL) that was passed on
10 June 2021 and comes into effect on September 1, 2021. A separate
draft of the Personal Information Protection Law (PIPL) has also
been in draft circulation and is expected to be passed and come
into effect at the end of 2021. The official Chinese version can be
found here
and an unofficial English version can be found here.
In contrast to the focus on personal information in the PIPL,
the DSL addresses data of all types with perhaps more emphasis on
the handling of non-personal information. So what does this mean
for you as a company operating and collecting data in or related to
China?