Law.com Subscribers SAVE 30%

Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.

What You Need to Know About China's New Privacy Law

By Devin Chwastyk and Christian Wolgemuth
December 01, 2021

The Personal Information Protection Law of the People's Republic of China (PIPL) went into effect on Nov. 1 and brought with it a suite of new requirements and lingering questions. Organizations already complying with the European Union's General Data Protection Regulation (GDPR) will find familiar many requirements of the PIPL, but GDPR veterans and newcomers will both need to pay close attention to the unique privacy rules of the most populous country in the world. This article touches upon a few of the points that organizations need to be aware of as they begin adapting their compliance programs according to the PIPL.

The PIPL uses its own terminology that is similar to words and phrases utilized heavily in the GDPR. For example, the PIPL refers to "personal information handlers" as organizations and individuals that, in personal information handling activities, autonomously decide handling purposes and handling activities. Those familiar with GDPR will see the similarities between the PIPL's "personal information handlers" and the GDPR's "data controllers."

Like the GDPR requires of data controllers, the PIPL requires that data handlers have a valid legal basis to collect personal information. Consent is key unless the data collection is necessary to fulfill a contract with the individual or certain other conditions are met. But limitations on data collection are only the beginning for PIPL compliance, as the law imposes a variety of additional burdens on businesses interested in the Chinese market.

This premium content is locked for Entertainment Law & Finance subscribers only

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts

For enterprise-wide or corporate acess, please contact Customer Service at [email protected] or 877-256-2473

Read These Next
'Huguenot LLC v. Megalith Capital Group Fund I, L.P.': A Tutorial On Contract Liability for Real Estate Purchasers Image

In June 2024, the First Department decided Huguenot LLC v. Megalith Capital Group Fund I, L.P., which resolved a question of liability for a group of condominium apartment buyers and in so doing, touched on a wide range of issues about how contracts can obligate purchasers of real property.

Strategy vs. Tactics: Two Sides of a Difficult Coin Image

With each successive large-scale cyber attack, it is slowly becoming clear that ransomware attacks are targeting the critical infrastructure of the most powerful country on the planet. Understanding the strategy, and tactics of our opponents, as well as the strategy and the tactics we implement as a response are vital to victory.

CoStar Wins Injunction for Breach-of-Contract Damages In CRE Database Access Lawsuit Image

Latham & Watkins helped the largest U.S. commercial real estate research company prevail in a breach-of-contract dispute in District of Columbia federal court.

Fresh Filings Image

Notable recent court filings in entertainment law.

The Article 8 Opt In Image

The Article 8 opt-in election adds an additional layer of complexity to the already labyrinthine rules governing perfection of security interests under the UCC. A lender that is unaware of the nuances created by the opt in (may find its security interest vulnerable to being primed by another party that has taken steps to perfect in a superior manner under the circumstances.