News & Analysis as of

Data Processors Data Security China

Lathrop GPM

New DOJ Limits on Cross-Border Data Transfers Prompt Assessment by Businesses

Lathrop GPM on

On April 8, the National Security Division of the U.S. Department of Justice’s (DOJ) new rule on cross-border data transfers takes effect. It restricts U.S. businesses from transferring certain bulk sensitive personal data to...more

DLA Piper

CHINA: Enhanced and Clarified Data Compliance Obligations on Handlers of “Network Data”, Covering Personal Information and...

DLA Piper on

Additional and clarified data compliance obligations will soon come into force under the long-awaited Network Data Security Management Regulation (“Regulation“), which was released on 30 September 2024. The Regulation is...more

WilmerHale

China Finalizes the Network Data Security Management Regulations and Issues the First Free Trade Zone Data Export Negative List

WilmerHale on

On September 24, 2024, the State Council released the Regulations on the Management of Network Data Security (《网络数据安全管理条例》) (“Regulations”). The Regulations focus on prominent issues related to Personal Information (PI),...more

DLA Piper

CHINA: Mandatory Data Protection Compliance (Self) Audits on Their Way

DLA Piper on

The Personal Information Protection Law (“PIPL“) requires a data controller to conduct compliance audits of its personal data processing activities on a regular basis (“Self-supervision Audits“). Apart from such...more

WilmerHale

Navigating China’s Data Security Laws in US Discovery

WilmerHale on

The enactment of China’s Cybersecurity Law (CSL), Data Security Law (DSL), and Personal Information Protection Law (PIPL, together with the CSL and the DSL, “Data Security Laws”) has significantly reshaped the landscape of...more

White & Case LLP

China’s Standard Contract for the Outbound Cross-border Transfer of Personal Information is in Effect

White & Case LLP on

China's Cybersecurity Law ("CSL"), Personal Information Protection Law ("PIPL") and Data Security Law ("DSL") set a series of rules and requirements for the cross-border transfer of personal information located in China....more

Pillsbury Winthrop Shaw Pittman LLP

Cross-Border Data Transfer Mechanisms and Requirements in China

In recent years, alongside the rapid development of the digital economy and the concomitant increase in data generation, collection, processing and monitoring in the People’s Republic of China (PRC or China), the Chinese...more

WilmerHale

CCRC is First to Be Qualified to Conduct Personal Information Protection Certification for Export of Personal Information

WilmerHale on

Article 38 of China’s Personal Information Protection Law (“PIPL”) enacted in 2021, which is more demanding than GDPR in Europe, provides three channels to conduct the outbound transfer or export of personal information...more

K&L Gates LLP

The CAC Assessment Collection – Part 2: What Must Be Done Before Applying for a CAC Assessment?

K&L Gates LLP on

In a recent alert, we painted the big picture of the security assessment conducted by the Cyberspace Administration of China (CAC) to data exporting activities from China (CAC Assessment), highlighting what data export...more

BCLP

PRC Legal Update: China’s Security Assessment Process of Outbound Data Transfers

BCLP on

Under the PRC Cybersecurity Law, PRC Personal Information Protection Law and PRC Data Security Law, certain organisations (as well as individuals) are now required to conduct a security assessment of outbound transfers of...more

Latham & Watkins LLP

China Unveils Draft Standard Contract and Provides Clarifications on Cross-Border Data Transfer Mechanisms

Latham & Watkins LLP on

China’s CAC publishes guidance on cross-border data transfers, including draft standard contractual clauses and regulatory guidance on certification and security assessment. Key Points: ..Security Assessment:...more

Morgan Lewis

Cyberspace Administration of China Issues Statement on Didi’s $1.2B Fines for Cybersecurity Law Violations

Morgan Lewis on

The Cyberspace Administration of China (CAC) announced on July 21 that it fined China’s ride-hailing giant Didi 8.026 billion yuan ($1.2 billion) for illegally collecting customer information since 2015 and handling data in a...more

Benesch

China Data Transfer Mechanisms and Requirements Come into View as Security Assessment and Technical Certification Measures...

Benesch on

The transfer mechanisms drive home China’s focus on data localization, as the measures all set forth cumbersome procedures and requirements, including security assessments and required contractual considerations. Despite...more

BCLP

Part 3 of 5: the PIPL and the Personal Information Security Specification

BCLP on

In Part 2 of this series, we discussed how the Personal Information Protection Law (“PIPL”), the centerpiece of China’s personal information (“PI”) protection law, needs to be read in conjunction with other relevant laws,...more

White & Case LLP

China Issued New Measures for Cybersecurity Review in 2022

White & Case LLP on

The Cyberspace Administration of China (the "CAC"), in conjunction with 12 other government departments (collectively, the "Working Mechanism"), issued the New Measures for Cybersecurity Review (the "New Measures") on January...more

Goodwin

China is Entering a New Era in Data Protections

Goodwin on

On November 1, 2021, the Personal Information Protection Law of the People’s Republic of China (the “PRC”) (the “Personal Information Protection Law”) went into effect, two months after the Data Security Law of the PRC (the...more

Jones Day

2021 Transactional Year in Review and 2022 Forecast: New Data Privacy Law in China

Jones Day on

China passed its new Data Security Law ("DSL") in June 2021 and its new Personal Information Protection Law ("PIPL") in August 2021. Both new laws impact every business operating in or doing business with China, coupling...more

K&L Gates LLP

What is Required Under the PIPL: A PRC-Based Representative or a Personal Information Protection Officer?

K&L Gates LLP on

Multinational entities with operations in or having business with the People’s Republic of China (PRC) should take note of the PRC’s new Personal Information Protection Law (PIPL), which took effect on 1 November 2021 and is...more

Epiq

Privacy Roundup Part Two: Significant International Updates

Epiq on

Last week’s blog detailed the wave of state legislation that occurred in the U.S. during 2021. It is no surprise that there were also many data privacy developments abroad. It is crucial that organizations affected by...more

WilmerHale

China Publishes Draft Regulations on the Administration of Network Data Security

WilmerHale on

The Cyberspace Administration of China (“CAC”) on November 14, 2021 published the draft Regulations on the Administration of Network Data Security (“Draft Regulations”) for comment through December 13, 2021.1 The Draft...more

Alston & Bird

China’s Initial Draft Regulations on the Management of Online Data Security: Important Takeaways

Alston & Bird on

On November 14, 2021, the Cyberspace Administration of China (CAC) released draft Regulations on the Management of Online Data Security (the “Regulations”) for China’s data privacy and security laws, including the...more

McDermott Will & Emery

[Webinar] PIPL - A Review of China’s New Privacy Law and Insights Into Achieving Compliance and Managing Risks - November 18th,...

McDermott Will & Emery on

China recently enacted its Personal Information Privacy Law (PIPL), which came into effect November 1, 2021. PIPL has global reach and broadly regulates entities of all industries that process the personal data of Chinese...more

Polsinelli

Five Immediate Steps to Take in Preparation for China’s New Comprehensive Privacy Law

Polsinelli on

China has recently joined the list of countries that have adopted the world’s strictest data-privacy laws. Given China’s desirability as both a market for and a source of data, companies worldwide have started making early...more

Morgan Lewis

Impact of Recent China Data Protection Laws on Asian Life Sciences Industry

Morgan Lewis on

Multinational pharmaceutical companies, by nature of their business, handle a great deal of data, often transferred across borders, whether based on research, clinical trial data, and employee personal data....more

White & Case LLP

China Personal Information Protection Law Will Become Effective Soon

White & Case LLP on

On August 20, 2021, the Standing Committee of the National People's Congress of the People's Republic of China ("PRC") passed the Personal Information Protection Law ("PIPL"), which will come into effect on November 1, 2021. ...more

34 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide