The new year ushered in a new way to commoditize personal data:
the Shanghai Data Exchange (SDE). With the Personal Information
Protection Law (PIPL) becoming effective on November 1, 2021
– as well as the Data Security Law (DSL) effective September
1, 2021, and the Cybersecurity Law (CSL) effective June 1, 2017
– the People's Republic of China has established an
ambitious and comprehensive national framework to regulate
cybersecurity, privacy and data protection. We anticipate ongoing
efforts at the provincial and local levels to establish varying
implementing regulations, template documents, best practices and
guidance regarding many of the yet-to-be-defined elements in these
laws. We may also start to see enforcement that could help clarify
key risk areas.
