The Regulations, which took effect on January 1, 2025, reiterate and clarify existing requirements and introduce new ones on privacy and network data security....more
On 22 March 2024, the CAC published the final version of the Provisions on Promoting and Regulating Cross-Border Data Flows which took effect immediately and follows the draft published for consultation in September 2023. On...more
China’s CAC and Hong Kong’s ITIB jointly released GBA SCCs, which may be adopted to transfer personal information between entities within the GBA.
On December 13, 2023, the People’s Republic of China’s (PRC’s) Cyberspace...more
Companies subject to India’s new data protection law should assess practical implications.
The Indian parliament enacted India’s first comprehensive data protection law on 11 August 2023, namely the Digital Personal Data...more
China’s regulations aim to address risks related to artificial intelligence and introduce compliance obligations on entities engaged in AI-related business.
This Client Alert discusses what technologies and entities are...more
On November 18, 2022, the State Administration for Market Regulation (SAMR) and the Cyberspace Administration of China (CAC) jointly released the Notice Regarding Personal Information Protection Certification attached with...more
China’s CAC publishes guidance on cross-border data transfers, including draft standard contractual clauses and regulatory guidance on certification and security assessment.
Key Points:
..Security Assessment:...more
8/9/2022
/ Certification Requirements ,
China ,
Cybersecurity ,
Data Privacy ,
Data Processors ,
Data Security ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Information ,
Personal Information Protection Law (PIPL) ,
Standard Contractual Clauses
Under the new rules Chinese NPOs holding more than 1 million individuals’ personal information must apply for a cybersecurity review prior to listing abroad.
Key Points:
..Chinese network platform operators (NPOs) holding...more
The Personal Information Protection Law, or PIPL, imposes stringent obligations of a similar standard to the GDPR and will take effect on November 1, 2021.
Key Points:
..Extraterritorial effect: PIPL applies to those who...more