Key Trends and Compliance Insights
On September 30, 2024, the China State Council released the
Regulation on Network Data Security Management ("New
Regulation"), which will come into effect on January
1, 2025. It effectively connects and integrates the understanding
and application of related data rules from different regulatory
dimensions, conveying a signal that the burden on enterprises is
being reduced.
Three years ago, the initial draft was first unveiled for
comments. At that time, the three key frameworks in the field of
data security regulation in China — the Cybersecurity Law
("CSL"), Data Security Law ("DSL"), and
Personal Information Protection Law ("PIPL") — had
successively taken into effect. The New Regulation mainly aims to
supplement and refine details based on these laws.
