On July 18, 2025, the Cyberspace Administration of China (the “CAC”) issued the Notice on Launching the Reporting Mechanism for Personal Information Protection Officers (the “Notice ”). This development marks a significant step in China’s regulatory enforcement of the Personal Information Protection Law (the “PIPL”) and its implementing rules, particularly the Administrative Measures on Compliance Audits of Personal Information Protection, effective June 1, 2025.Continue Reading China Initiates Mandatory Reporting Regime for Personal Information Protection Officers

On August 20, 2021, the Standing Committee of the National People’s Congress adopted the Personal Information Protection Law of the People’s Republic of China (the “Personal Information Protection Law”).  The Personal Information Protection Law will become effective on November 1, 2021, and will then, together with  the Cybersecurity Law of the People’s Republic of China (the “Cybersecurity Law”) and the Data Security Law of the People’s Republic of China (which will become effective on September 1, 2021, the “Data Security Law”), form the foundation of the data security legal regime of China.
Continue Reading Highlights of China’s Recently Adopted Personal Information Protection Law