China – Recent new data protection legislation: Data Security Law and Personal Information Protection Law
The Standing Committee of the National People's Congress has promulgated two important new laws related to (personal) data protection in recent months. On the one hand, the ‘Data Security Law’ (DSL) was promulgated in mid-June. This law provides (additional) security obligations regarding important and essential state data. This law comes into force on 1 September 2021. On the other hand, the ‘Personal Information Protection Law’ (PIPL) was also promulgated at the end of August, which will come into force on 1 November 2021. This law imposes additional obligations on companies regarding the processing of personal data. These laws further complement China's already existing data protection laws (including the Cybersecurity Law of 2017).
