Under China’s data protection regulatory framework, data processors are required to pass a security assessment conducted by the cybersecurity regulator before transferring certain categories or volumes of data out of China....more
On October 29, 2021, the Cyberspace Administration of China ("CAC") published the "Draft Measures on Security Assessment of Cross-Border Data Transfer" ("Draft Measures") for public comment, which outlines the requirements...more
China’s long-waited Personal Information Protection Law (“PIPL”) was finally enacted on August 20, 2021, and will take effect on November 1, 2021. PIPL, which supplements the existing privacy rules established by the...more