China, Regulatory Requirements, Data Processors

Data Protection Compliance Audits to Take Effect in China in 2025

Latham & Watkins LLP on 5/19/2025

The Measures outline requirements and procedures for self-initiated and regulator-mandated compliance audits from May 1, 2025....more

CHINA: Mandatory Data Protection Compliance (Self) Audits on Their Way

DLA Piper on 9/4/2024

The Personal Information Protection Law (“PIPL“) requires a data controller to conduct compliance audits of its personal data processing activities on a regular basis (“Self-supervision Audits“). Apart from such...more

Part 3 of 5: the PIPL and the Personal Information Security Specification

BCLP on 2/18/2022

In Part 2 of this series, we discussed how the Personal Information Protection Law (“PIPL”), the centerpiece of China’s personal information (“PI”) protection law, needs to be read in conjunction with other relevant laws,...more

China Publishes Draft Regulations on the Administration of Network Data Security

WilmerHale on 12/7/2021

The Cyberspace Administration of China (“CAC”) on November 14, 2021 published the draft Regulations on the Administration of Network Data Security (“Draft Regulations”) for comment through December 13, 2021.1 The Draft...more

Five Immediate Steps to Take in Preparation for China’s New Comprehensive Privacy Law

Polsinelli on 11/2/2021

China has recently joined the list of countries that have adopted the world’s strictest data-privacy laws. Given China’s desirability as both a market for and a source of data, companies worldwide have started making early...more

Highlights of China's New Personal Information Protection Law

Jones Day on 9/10/2021

The PIPL imposes extensive obligations on organizations and individuals engaged in "handling" of personal information, which is defined to include "collection, storage, use, processing, transmission, provision, disclosure,...more