14 June 2019
China Cyber Security Law Update: Long-Awaited Second Draft Measures on Security Assessment for Export of Personal Information: Any clarity?
www.twobirds.com/en/news/articles/2019/global/china-cyber-security-law-update

On 13 June 2019, the Cyberspace Administration of China (CAC) issued a long-awaited second draft Measures on Security Assessment for Export of Personal Information. In this update we examine some of the key takeaways.

27 June 2019
China Cybersecurity Law Update: Picking up the pace (quick!) : Further revision to the National Standards on Protection of Personal Information in China
www.twobirds.com/en/news/articles/2019/china/china-cybersecurity-law-update-picking-up-the-pace-quick

China's National Information Security Standardization Technical Committee released a draft revised national standard on personal information protection.

28 October 2020
China Data Protection Update and Deep Dive (1): Data sharing and cross-border data transfer rules under the Draft Personal Information Protection Law
www.twobirds.com/en/news/articles/2020/china/china-data-protection-update-and-deep-dive-1

The long-awaited draft of the Personal Information Protection Law of China (“Draft PI Protection Law”) was officially released for public consultation on 21 October 2020. In this article, which is the first of a series ...

04 November 2020
China Draft Personal Information Protection Law: Deep Dive (3): Individual Rights
www.twobirds.com/en/news/articles/2020/china/china-draft-personal-information-protection-law-deep-dive-3-individual-rights

Consistent with international practice, the draft PRC Personal Information Protection Law ("Draft PI Protection Law") contains a comprehensive set of individual rights. In Part 3 of our four part series, we will explore ...

10 November 2020
China Data Protection Update and Deep Dive (4): Accountability and breach notifications
www.twobirds.com/en/news/articles/2020/china/china-data-protection-update-and-deep-dive-accountability-and-breach-notifications

Accountability is a key concept under data protection regimes that refers to the obligations on a data controller to demonstrate compliance with applicable data protection requirements. What are the accountability ...

12 January 2021
A curb on what personal information is necessary for your app – proposed rule by the Cyber Administration of China
www.twobirds.com/en/news/articles/2021/china/a-curb-on-what-personal-information-is-necessary-for-your-app

Currently, Article 41 of the PRC Cyber Security Law provides that personal information should only be collected if it is necessary. In the absence of judicial guidance, one of the challenges faced by app operators and ...

23 October 2020
China Data Protection Update: The First Draft of The Long-Awaited PRC Personal Information Protection Law released
www.twobirds.com/en/news/articles/2020/china/china-data-protection-update-the-first-draft-of-the-long-awaited-prc-personal-information-protection

The long-awaited draft of the Personal Information Protection Law of China (“Draft PI Protection Law”) was submitted for its first deliberation during the PRC National People’s Congress Standing Committee on 13 Oct ...

30 October 2020
China Data Protection Update: Deep Dive (2): Data protection principles, legal basis of processing and consent requirements under the Draft Personal Information Protection Law
www.twobirds.com/en/news/articles/2020/china/china-data-protection-update-deep-dive-2-data-protection-principles-legal-basis-of-processing

This newsletter is the second "deep-dive" newsletter on the new draft Personal Information Protection Law ("Draft PI Protection Law") which was published for public consultation on 21 October 2020. Please refer to the ...

19 October 2020
China Civil Code Series - TMT Perspective: Data Protection
www.twobirds.com/en/news/articles/2020/china/china-civil-code-series-tmt-perspective-data-protection

On 28 May 2020, the National People's Congress ("NPC"), the top legislator in China, adopted the Civil Code of the People's Republic of China. The Civil Code will become effective on 1 January 2021.

28 June 2017
Cybersecurity by design in China
www.twobirds.com/en/news/articles/2017/hong-kong/cybersecurity-by-design

Draft revised rules on security assessment on providing new internet business published