China has built an extensive legal framework to deal with data
privacy issues. A key focus this past year has been on outbound
data compliance; some of the key challenges for international
businesses in this area include:
- With GDPR as model, The new system has distinct Chinese
characteristics that make it challenging to understand and adapt
to.
- The system is still under development.
- While the main targets are large-scale handles of personal
information, the law put obligations on almost all international
companies operating in China.
Many international companies are taking a wait-and-see attitude.
But deadlines are fast-approaching or have already passed, and in
the current environment, multinationals are the prime targets of
government enforcement actions. International companies must
understand their duties and review the steps necessary to become
compliant.
