Other Briefings
New Guidelines on Handling Sensitive Personal Data in China in Effect November 1
New nonmandatory standards provide useful clarity on how to legally process senstive personal data throughout the entire lifecycle, facilitating compliance with regulations.
New Guide for Cross-Border Personal Data Transfers in the GBA: A Roadmap for Compliance and Security
The Technical Committee for Information Security Technology (TC260) has released a new guide to standardize cross-border personal data transfers between the Chinese Mainland and Hong Kong within the Guangdong-Hong Kong-Macao Greater Bay Area (GBA). This guide introduces enhanced security standards and mutual recognition mechanisms, aiming to facilitate smoother data flows while ensuring robust protection of personal information.
Personal Data Regulation in China: Personal Information Protection Law, Other Rules Amended
Internet businesses and companies processing personal data in China are advised to track latest regulatory developments supporting data security to remain compliant.
Cross-Border Data Transfers – New Draft Measures Clarify Personal Information Protection Certification
China’s new draft measures provide clarity on the certification process for personal information protection in cross-border data transfers (CBDT).
How Did Dior Violate China’s Personal Information Protection Law? Lessons from the PIPL Probe
The investigation into Dior’s handling of personal information exposed gaps in consent, cross-border transfer compliance, and security safeguards, offering valuable lessons for businesses navigating China’s Personal Information Protection Law.
Decoding China’s Imports in 2025: January–July Data Breakdown
China’s imports in the first seven months of 2025 highlight shifting patterns across trading partners, product categories, and import methods. For exporters and investors, these trends signal where new growth opportunities are emerging.
Data as Intellectual Property in China: Legal Developments and Regional Pilots
China is establishing a state-led framework recognizing processed data as a new form of intellectual property (IP), enabling its registration, licensing, and commercialization through formal exchanges.
How to Choose an Agency for Personal Information Protection Audits (Part II)
New guidelines outlining criteria for professional institutions to carry out personal information protection audits provide guidance for companies to choose the right auditor.
