Are You Prepared For The Data Security Law Effective From 1 September 2021?

On 10 June 2021, the Standing Committee of the 13^th National People's Congress adopted the Data Security Law of the People's Republic of China ("Data Security Law") effective from 1 September 2021.

The Law establishes an overarching framework to regulate data handling and management accordingly with national sovereignty, security, and development interests. Under the Data Security Law, the scope and definition of data include any record of information in electronic or other forms and an extraterritorial application to China-related data handling and management. Therefore, companies should be implementing changes for the forthcoming September effective date.

At Horizons, we have been advising clients with China commercial interests to evaluate data handling and management in preparation for the Data Security Law. Specifically, we recommend appointing a specific China data management officer who develops compliance policies and correct implementation to safeguard the