Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 17 MAY 2021

Market Intelligence Thought Leadership Award Winner

Update On The State Of Privacy Law In China

Sheppard
Sheppard
Contributor
Sheppard

Sheppard

Businesses turn to Sheppard to deliver sophisticated counsel to help clients move ahead. With more...

View firm profile
Explore more from Sheppard

China is continuing to move forward with its first comprehensive privacy law. China recently issued a second version of the draft Personal Information Protection Law (Draft PIPL)...

ChinaPrivacy
Liisa Thomas
Liisa Thomas
Julia K. Kadish
Julia K. Kadish
Kari M. Rollins
Kari M. Rollins
Author LinkedIn connections

China is continuing to move forward with its first comprehensive privacy law. China recently issued a second version of the draft Personal Information Protection Law (Draft PIPL) which will be open for public comments until May 28, 2021. (An earlier version of the law was released at the end of 2020.) The law is anticipated to come into effect sometime in the next one to two years.

Current State of Laws

China does not currently have a comprehensive data privacy law. There are some rules about data protection and use scattered in existing laws, national standards and governmental guidelines. For example, the country's current Cybersecurity Law, which came into effect in June 2017, is focused on the “critical information infrastructure.” Specifically, the law is directed at “network operators” (anyone owning or operating a computer system network), and suppliers of network products and services.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

China Cross-border Data Transfer: Enforcement Has Arrived

China's cross-border data transfer regime has moved from paper framework to active enforcement in 2026, with regulators issuing significant fines and new rules for both small and large data processors. The three-pathway framework of CAC security assessment, Standard Contract filing, and personal information protection certification is now fully operational, creating real compliance obligations for any business moving personal data out of China.
ChinaPrivacy
BUREN
BUREN
Article

中企出海法律合规系列——数据泄露应对全流程指南

2022年，一场震惊全球的数据泄露事件将某知名国际网约车公司推上风口浪尖。黑客通过社交工程手段攻破其第三方供应商员工的VPN权限，进而入侵多个内部系统，导致大量员工和司机的姓名、邮箱、位置信息、账户内容等个人数据遭到外泄。事件发生后，美国联邦贸易委员会（FTC）率先发起调查&#
ChinaPrivacy
AnJie Broad Law Firm
AnJie Broad Law Firm
Article

FDA Balances Peptide Policy With Enforcement Against Unlawful Peptide Sellers

Over the past year, industry has had a front row seat as the Food and Drug Administration (“FDA” or the “Agency”) decides just how much leeway it wants to afford the manufacture, marketing, and sale of peptide products, and just where it wants to draw the line. Despite the recent decision of FDA’s Pharmacy Compounding Advisory Committee (“PCAC”) to recommend a number of peptides for inclusion on the 503A bulks list process — a move that represents a potentially more permissive stance toward peptide regulation, at least in terms of what can and cannot be compounded under 503A...
United StatesFood, Drugs, Healthcare, Life Sciences
Sheppard
Sheppard
Article

The Ninth Circuit Affirms Dismissal Of DMCA CMI Removal Claim Against AI Code Generator – Output Is A New Work Not A Copy Of Training Data

There was a significant ruling in the Doe v. Github case involving training of AI code generator models on open source. The United States Court of Appeals for The Ninth Circuit affirmed the district court ruling dismissing part of an action brought under the Digital Millennium Copyright Act (“DMCA”) by programmers against GitHub, Inc., and other defendants. The issues centered on whether defendants removed copyright management information (CMI) from content used to train the AI code generator models.
United StatesIntellectual Property
Sheppard
Sheppard
Article

Massachusetts Issues Guidance On Data Center Development Under Executive Order 658

Massachusetts Governor Maura Healey has issued Executive Order 658, establishing comprehensive permitting and regulatory standards for data centers exceeding 25 MW of peak electricity demand. The Order mandates community benefits agreements, clean energy procurement protocols, and coordination across multiple state agencies to ensure responsible development that protects ratepayers, communities, and the environment. This action positions Massachusetts alongside other states implementing stricter oversight o
United StatesEnergy and Natural Resources
Sheppard
Sheppard
Article

Fintech Agrees To Acquire National Bank Partner For $590 Million

A publicly traded fintech company has announced a $590 million acquisition of its longtime national bank partner, marking a strategic shift from the traditional bank-partnership model to direct ownership of a national bank charter. The transaction, expected to close in the first half of 2027 pending regulatory approvals, would make the fintech a bank holding company while consolidating its banking activities and eliminating certain sponsor-bank fees. This deal represents a faster alternative to pursuing a d
United StatesFinance and Banking
Sheppard
Sheppard