Intellectual Property, Information Technology & Cybersecurity

After rounds of public consultation on the draft laws, the Personal Information Protection Law (PIPL) has finally been officially passed by the Chinese legislature on 20 August 2021. The PIPL imposes stringent legal restrictions on the processing, use and management of personal data, and it signals China's important first step to align its personal information protection laws to international standards.

The PIPL will come into effect on 1 November 2021 in China. It will no doubt have a major impact on the personal information processing activities of companies conducting business in China. 

In this article, we will go through the must-know of the PIPL and its significance, drawing from our experience in advising on personal information protection under the existing legal framework in China with particular focus on the following aspects:

• Extraterritorial Jurisdiction
• Governing Cross-Border Transfer of Personal Information
• Requirement of Obtaining Consent
• Regulation of Automated Decision-Making
• Penalties and Legal Consequences
• Compliance of PIPL

Read the entire article.