Legal Framework Governing Cyber Security And Data Protection – Key Points For Foreign-Invested Enterprises

In recent years, a comprehensive legal framework has been implemented to regulate information security and data handling in China. Particularly in 2021, numerous data laws and regulations, relevant normative documents, and industry standards were adopted to form the blueprint for cyber and data security.

The following chart shows the regulatory regime of the cybersecurity and data protection in China. The Data Security Law, Cybersecurity Law, Personal Information Protection Law and other implementing regulations and guidelines form the main pillars of the framework.