Cybersecurity / 网络安全, Data Export / 数据出境, PIPL Compliance / 个保法合规
2026-09-30
The Cyberspace Administration of China released its Questions and Answers on Policies and Regulations for Data Export Security Management (September 2026) on 11 September 2026.国家互联网信息办公室于 2026 年 9 月...
2026-09-03
The Cyberspace Administration of China (CAC) and the Ministry of Public Security jointly issued the Provisions on Simplified Personal Information Protection Measures for Small-Scale Personal Information Processors (Order No....
Data Export / 数据出境, PIPL Compliance / 个保法合规
2026-09-01
In August 2026 the data-outbound negative list regime moved from design to delivery: Beijing recorded China's first banking-sector case (NH Bank's Beijing branch), Guangdong's FTZ list produced its first...
2026-08-28
PIPL took effect on 1 November 2021 and has extraterritorial reach, binding overseas processors that handle personal information of individuals in China. 《个人信息保护法》于2021年11月1日施行，并具有域外效力（第三条），约束处理中国境内自然人个人信息的境外处理者。Processing requires a documented lawful basis...
Cybersecurity / 网络安全, PIPL Compliance / 个保法合规
2026-08-28
The Measures for Network Data Security Risk Assessment, jointly issued by the CAC, MIIT and MPS, took effect on 20 August 2026. 由国家网信办、工业和信息化部、公安部联合制定的《网络数据安全风险评估办法》于 2026 年 8 月 20...
2026-08-28
The Personal Information Protection Law gives three cross-border paths — security assessment, standard contract, and certification — all now operable after the 2026 Certification Measures took effect on 1...
2026-08-28
Cross-border transfers of employee personal information are exempt from the security-assessment, standard-contract and certification routes where they implement cross-border HR management under a duly adopted labour rule or collective...
2026-08-28
PIPL creates two distinct governance roles: a personal information protection officer (PIPO) under Article 52, and a domestic dedicated institution or designated representative for overseas processors under Article 53....
2026-08-28
The CAC's January 2026 draft "Rules on Personal Information Collection and Use by Internet Applications" codifies consent, separate consent for sensitive data, and minimal collection for apps, SDKs, distribution...
2026-08-28
CAC Order No. 18, the Measures for the Administration of Personal Information Protection Compliance Audits, was published on 14 February 2025 and took effect on 1 May 2025. ...