{"id":9077,"date":"2021-12-07T07:30:24","date_gmt":"2021-12-07T07:30:24","guid":{"rendered":"https:\/\/focus.cbbc.org\/?p=9077"},"modified":"2025-04-23T09:48:26","modified_gmt":"2025-04-23T09:48:26","slug":"what-does-chinas-new-data-privacy-law-mean-for-uk-companies","status":"publish","type":"post","link":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/","title":{"rendered":"What does China\u2019s new data privacy law mean in practice?"},"content":{"rendered":"<h2><b>China\u2019s <\/b><b>new<\/b>\u00a0<b>Personal Information Protection Law (PIPL)<\/b> came into effect on November 1 and is now one of <b>the strictest in the world <\/b>governing <b>what businesses can do with Chinese people\u2019s<\/b> <b>personal information<\/b>. So <b>what <\/b><b>do<\/b> China\u2019s new data privacy laws mean for <b>your<\/b><b> company in practice?<\/b> And how can you make sure you\u2019re <b>compliant with the new regulations?<\/b><\/h2>\n<p>In this article, first published in <a href=\"https:\/\/www.china-briefing.com\/news\/how-to-understand-the-implementation-of-the-pipl-in-china-faq\/\" target=\"_blank\" rel=\"noopener\">China Briefing<\/a>, Thomas Zhang, Dezan Shira &amp; Associates\u2019 Group IT Director, introduces the <a href=\"https:\/\/focus.cbbc.org\/what-are-chinas-new-data-protection-and-user-data-laws\/\" target=\"_blank\" rel=\"noopener\">PIPL<\/a> and explains several key considerations for companies to build a roadmap for compliance.<\/p>\n<p><a href=\"\/lp-cta-general\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" class=\"aligncenter wp-image-7247 size-full\" src=\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-general.png\" alt=\"launchpad CBBC\" width=\"4680\" height=\"786\" srcset=\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-general.png 4680w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-general-300x50.png 300w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-general-1024x172.png 1024w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-general-768x129.png 768w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-general-1536x258.png 1536w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-general-2048x344.png 2048w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-general-1920x322.png 1920w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-general-1170x197.png 1170w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-general-585x98.png 585w\" sizes=\"(max-width: 4680px) 100vw, 4680px\" \/><\/a><\/p>\n<h4>PIPL states that a company should appoint \u201ca person in charge of personal information protection\u201d when processing personal information on a large scale based on the criteria specified by the CAC. Is the appointment of a Data Protection Officer (DPO) mandatory under the PIPL?<\/h4>\n<p>No, it is not mandatory; however, for companies that don\u2019t have an office in China and still want to provide services in China, a DPO or representative is necessary. In general, in cases where the company has an office in China and they can find a local person to play the role of representative, there is no need to have a DPO. Nevertheless, many companies don\u2019t have enough internal resources to support this, so an external DPO can be very helpful.<\/p>\n<h4>Can a company send aggregated information derived from personal information across borders, especially if it doesn\u2019t contain any specific personal information on Chinese citizens?<\/h4>\n<p>Yes, because we are talking about aggregated data \u2013 which doesn\u2019t have any specific personal information of individuals. This means that it will be \u201cabstract\u201d data that cannot be tracked to one single individual. In this case, the data will not be treated as personal information or as sensitive personal information, and you are allowed to transfer it outside of China.<\/p>\n<div style=\"clear:both; margin-top:2em; margin-bottom:2em;\"><a href=\"https:\/\/focus.cbbc.org\/what-are-chinas-new-data-protection-and-user-data-laws\/\" target=\"_self\" rel=\"dofollow\" class=\"u72d743713d2f6fd50ad54f5dd60b12cb\"><style> .u72d743713d2f6fd50ad54f5dd60b12cb { padding:0px; margin: 0; padding-top:1em!important; padding-bottom:1em!important; width:100%; display: block; font-weight:bold; background-color:#eaeaea; border:0!important; border-left:4px solid #E74C3C!important; box-shadow: 0 1px 2px rgba(0, 0, 0, 0.17); -moz-box-shadow: 0 1px 2px rgba(0, 0, 0, 0.17); -o-box-shadow: 0 1px 2px rgba(0, 0, 0, 0.17); -webkit-box-shadow: 0 1px 2px rgba(0, 0, 0, 0.17); text-decoration:none; } .u72d743713d2f6fd50ad54f5dd60b12cb:active, .u72d743713d2f6fd50ad54f5dd60b12cb:hover { opacity: 1; transition: opacity 250ms; webkit-transition: opacity 250ms; text-decoration:none; } .u72d743713d2f6fd50ad54f5dd60b12cb { transition: background-color 250ms; webkit-transition: background-color 250ms; opacity: 1; transition: opacity 250ms; webkit-transition: opacity 250ms; } .u72d743713d2f6fd50ad54f5dd60b12cb .ctaText { font-weight:bold; color:#E74C3C; text-decoration:none; font-size: 16px; } .u72d743713d2f6fd50ad54f5dd60b12cb .postTitle { color:#000000; text-decoration: underline!important; font-size: 16px; } .u72d743713d2f6fd50ad54f5dd60b12cb:hover .postTitle { text-decoration: underline!important; } <\/style><div style=\"padding-left:1em; padding-right:1em;\"><span class=\"ctaText\">Read Also<\/span>&nbsp; <span class=\"postTitle\">How will China's new data protection laws affect your business?<\/span><\/div><\/a><\/div>\n<h4>A company is exchanging data with its headquarters via SAP. Will this be deemed a cross-border transfer and require a Data Protection Impact Assessment (DPIA)?<\/h4>\n<p>If your IT system is located in the UK, but your business operations in China are processing personal information, you will need a DPIA. Whether you are allowed to transfer personal information out of the country or not is based on the scale of the personal information. The Cyberspace Administration of China (CAC) will specify the criteria about which kind of personal information will not be allowed to be transferred out, but for now, we will need to wait for more details from the government.<\/p>\n<h4>Many international schools store student data. What about the protection of data for children under 14 years old? Are there special protections under the PIPL?<\/h4>\n<p>Yes. Information from people under 14 years of age will also be regarded as sensitive information. If you are going to process sensitive personal information, you must collect separate consent and conduct a DPIA.<\/p>\n<h4>Are employee names and mobile phone numbers in an active directory considered personal information?<\/h4>\n<p>Yes. The definition of personal information is very wide under the PIPL. Any information that can be tied to one single individual is considered personal information. For example, mobile phone numbers in China are tied to real names and can be connected to an individual. Names are also a kind of personal information. Although a name can be common and used for multiple people, under the PIPL it is still considered personal information.<\/p>\n<blockquote><p>Yes. The definition of personal information is very wide under the PIPL. Any information that can be tied to one single individual is considered personal information. For example, mobile phone numbers in China are tied to real names and can be connected to an individual.<\/p><\/blockquote>\n<h4>Are security logs (e.g., firewalls and active directories) considered personal information (as they are usually linked to an IP address or account name and not directly linkable to the user)?<\/h4>\n<p>Yes. Under the GDPR, IP addresses are defined as personal information, and this is the same for the PIPL. We know that IP addresses are dynamic, but from an IT perspective, we can still trace an individual to their IP address most of the time with certain efforts, making IP addresses one kind of personal information under the PIPL.<\/p>\n<div style=\"clear:both; margin-top:2em; margin-bottom:2em;\"><a href=\"https:\/\/focus.cbbc.org\/understanding-cybersecurity-and-data-protection-in-china\/\" target=\"_self\" rel=\"dofollow\" class=\"ucda05e304e2469f6d8951b7c00e628a7\"><style> .ucda05e304e2469f6d8951b7c00e628a7 { padding:0px; margin: 0; padding-top:1em!important; padding-bottom:1em!important; width:100%; display: block; font-weight:bold; background-color:#eaeaea; border:0!important; border-left:4px solid #E74C3C!important; box-shadow: 0 1px 2px rgba(0, 0, 0, 0.17); -moz-box-shadow: 0 1px 2px rgba(0, 0, 0, 0.17); -o-box-shadow: 0 1px 2px rgba(0, 0, 0, 0.17); -webkit-box-shadow: 0 1px 2px rgba(0, 0, 0, 0.17); text-decoration:none; } .ucda05e304e2469f6d8951b7c00e628a7:active, .ucda05e304e2469f6d8951b7c00e628a7:hover { opacity: 1; transition: opacity 250ms; webkit-transition: opacity 250ms; text-decoration:none; } .ucda05e304e2469f6d8951b7c00e628a7 { transition: background-color 250ms; webkit-transition: background-color 250ms; opacity: 1; transition: opacity 250ms; webkit-transition: opacity 250ms; } .ucda05e304e2469f6d8951b7c00e628a7 .ctaText { font-weight:bold; color:#E74C3C; text-decoration:none; font-size: 16px; } .ucda05e304e2469f6d8951b7c00e628a7 .postTitle { color:#000000; text-decoration: underline!important; font-size: 16px; } .ucda05e304e2469f6d8951b7c00e628a7:hover .postTitle { text-decoration: underline!important; } <\/style><div style=\"padding-left:1em; padding-right:1em;\"><span class=\"ctaText\">Read Also<\/span>&nbsp; <span class=\"postTitle\">Understanding China's cybersecurity and data protection risks<\/span><\/div><\/a><\/div>\n<h4>If processed personal information is stored by a third-party vendor such as Google Drive, does it fall to the vendor to formulate proper information protection that complies with the PIPL?<\/h4>\n<p>Similar to GDPR, under PIPL, it is the information controller \u2013 the one who makes decisions on how to collect and store the data \u2013 that assumes the responsibility for personal information protection. Therefore, if you are the information controller, and you make the decision to collect personal information and make the decision to transfer it out to save in Google Drive, you are responsible for everything. Of course, you can make a service agreement with your vendor to specify what kind of measures should be taken to protect the personal information.<\/p>\n<h4>If an IP address is a company private IP address, for example, 10.0.0.1, is it considered personal information?<\/h4>\n<p>From a technical perspective, yes. For example, in China, the cyber police require companies to set up a firewall or security device, which can allow the company to track the website access logs for users. This means that even if you are using a private IP of your company, your firewall or security can still track these records, and IT can use these records to trace back to the individual using this IP address. In practice, however, at the current stage, IP address information is really a minor consideration for the authorities. There are other more significant issues for the authorities to pay attention to.<\/p>\n<p><a href=\"\/lp-cta-membership2\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" class=\"aligncenter wp-image-7249 size-full\" src=\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-membership2.png\" alt=\"Launchpad membership 2\" width=\"4680\" height=\"786\" srcset=\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-membership2.png 4680w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-membership2-300x50.png 300w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-membership2-1024x172.png 1024w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-membership2-768x129.png 768w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-membership2-1536x258.png 1536w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-membership2-2048x344.png 2048w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-membership2-1920x322.png 1920w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-membership2-1170x197.png 1170w, https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/03\/lp-membership2-585x98.png 585w\" sizes=\"(max-width: 4680px) 100vw, 4680px\" \/><\/a><\/p>\n<p><i>This article was first published by China Briefing, which is produced by <\/i><a href=\"http:\/\/click.dezshira.com\/c\/6\/?T=MTQxNTY1NzM%3AMDItYjIwMzQzLTljMDI4MTFjMTY4OTQ1OWE4MWI5MmIxNWJkZThkZWY2%3Acm9oaW5pLnNpbmdoQGRlenNoaXJhLmNvbQ%3AbGVhZC05OWNkZTM0YjNkYWFlODExYTk2ZTAwMGQzYWEzMDZmMC00NGRiOGYzMGVmNTM0YzRkYjlhY2M2ZmE3MWY4YTg2MA%3AZmFsc2U%3ANTI%3A%3AaHR0cDovL3d3dy5kZXpzaGlyYS5jb20vP19jbGRlZT1jbTlvYVc1cExuTnBibWRvUUdSbGVuTm9hWEpoTG1OdmJRJTNkJTNkJnJlY2lwaWVudGlkPWxlYWQtOTljZGUzNGIzZGFhZTgxMWE5NmUwMDBkM2FhMzA2ZjAtNDRkYjhmMzBlZjUzNGM0ZGI5YWNjNmZhNzFmOGE4NjAmZXNpZD05MWM1OWI3ZC0yNjM5LWViMTEtYTgxMy0wMDBkM2EwODViMGY&amp;K=WdczSFTU68ZBYzR_-NTMGg\"><span class=\"s2\"><i>Dezan Shira\u00a0&amp; Associates<\/i><\/span><\/a><i>. The firm assists foreign investors throughout Asia from offices\u00a0<\/i><a href=\"http:\/\/click.dezshira.com\/c\/6\/?T=MTQxNTY1NzM%3AMDItYjIwMzQzLTljMDI4MTFjMTY4OTQ1OWE4MWI5MmIxNWJkZThkZWY2%3Acm9oaW5pLnNpbmdoQGRlenNoaXJhLmNvbQ%3AbGVhZC05OWNkZTM0YjNkYWFlODExYTk2ZTAwMGQzYWEzMDZmMC00NGRiOGYzMGVmNTM0YzRkYjlhY2M2ZmE3MWY4YTg2MA%3AZmFsc2U%3ANTM%3A%3AaHR0cHM6Ly93d3cuZGV6c2hpcmEuY29tL29mZmljZT9fY2xkZWU9Y205b2FXNXBMbk5wYm1kb1FHUmxlbk5vYVhKaExtTnZiUSUzZCUzZCZyZWNpcGllbnRpZD1sZWFkLTk5Y2RlMzRiM2RhYWU4MTFhOTZlMDAwZDNhYTMwNmYwLTQ0ZGI4ZjMwZWY1MzRjNGRiOWFjYzZmYTcxZjhhODYwJmVzaWQ9OTFjNTliN2QtMjYzOS1lYjExLWE4MTMtMDAwZDNhMDg1YjBm&amp;K=gfNAdwXe5Aqwx0s4VHY0-g\"><span class=\"s2\"><i>across the world<\/i><\/span><\/a><i>, including in\u00a0<\/i><a href=\"http:\/\/click.dezshira.com\/c\/6\/?T=MTQxNTY1NzM%3AMDItYjIwMzQzLTljMDI4MTFjMTY4OTQ1OWE4MWI5MmIxNWJkZThkZWY2%3Acm9oaW5pLnNpbmdoQGRlenNoaXJhLmNvbQ%3AbGVhZC05OWNkZTM0YjNkYWFlODExYTk2ZTAwMGQzYWEzMDZmMC00NGRiOGYzMGVmNTM0YzRkYjlhY2M2ZmE3MWY4YTg2MA%3AZmFsc2U%3ANTQ%3A%3AaHR0cHM6Ly93d3cuZGV6c2hpcmEuY29tL29mZmljZS9jaGluYT9fY2xkZWU9Y205b2FXNXBMbk5wYm1kb1FHUmxlbk5vYVhKaExtTnZiUSUzZCUzZCZyZWNpcGllbnRpZD1sZWFkLTk5Y2RlMzRiM2RhYWU4MTFhOTZlMDAwZDNhYTMwNmYwLTQ0ZGI4ZjMwZWY1MzRjNGRiOWFjYzZmYTcxZjhhODYwJmVzaWQ9OTFjNTliN2QtMjYzOS1lYjExLWE4MTMtMDAwZDNhMDg1YjBm&amp;K=-APMTWdCn_J1YVrjR2lASQ\"><span class=\"s2\"><i>China<\/i><\/span><\/a><i>,\u00a0<\/i><a href=\"http:\/\/click.dezshira.com\/c\/6\/?T=MTQxNTY1NzM%3AMDItYjIwMzQzLTljMDI4MTFjMTY4OTQ1OWE4MWI5MmIxNWJkZThkZWY2%3Acm9oaW5pLnNpbmdoQGRlenNoaXJhLmNvbQ%3AbGVhZC05OWNkZTM0YjNkYWFlODExYTk2ZTAwMGQzYWEzMDZmMC00NGRiOGYzMGVmNTM0YzRkYjlhY2M2ZmE3MWY4YTg2MA%3AZmFsc2U%3ANTU%3A%3AaHR0cHM6Ly93d3cuZGV6c2hpcmEuY29tL29mZmljZS9ob25nLWtvbmcuaHRtbD9fY2xkZWU9Y205b2FXNXBMbk5wYm1kb1FHUmxlbk5vYVhKaExtTnZiUSUzZCUzZCZyZWNpcGllbnRpZD1sZWFkLTk5Y2RlMzRiM2RhYWU4MTFhOTZlMDAwZDNhYTMwNmYwLTQ0ZGI4ZjMwZWY1MzRjNGRiOWFjYzZmYTcxZjhhODYwJmVzaWQ9OTFjNTliN2QtMjYzOS1lYjExLWE4MTMtMDAwZDNhMDg1YjBm&amp;K=BJSuw2TPgMc62mEuilunDQ\"><span class=\"s2\"><i>Hong Kong<\/i><\/span><\/a><i>,\u00a0<\/i><a href=\"http:\/\/click.dezshira.com\/c\/6\/?T=MTQxNTY1NzM%3AMDItYjIwMzQzLTljMDI4MTFjMTY4OTQ1OWE4MWI5MmIxNWJkZThkZWY2%3Acm9oaW5pLnNpbmdoQGRlenNoaXJhLmNvbQ%3AbGVhZC05OWNkZTM0YjNkYWFlODExYTk2ZTAwMGQzYWEzMDZmMC00NGRiOGYzMGVmNTM0YzRkYjlhY2M2ZmE3MWY4YTg2MA%3AZmFsc2U%3ANTY%3A%3AaHR0cHM6Ly93d3cuZGV6c2hpcmEuY29tL29mZmljZS92aWV0bmFtP19jbGRlZT1jbTlvYVc1cExuTnBibWRvUUdSbGVuTm9hWEpoTG1OdmJRJTNkJTNkJnJlY2lwaWVudGlkPWxlYWQtOTljZGUzNGIzZGFhZTgxMWE5NmUwMDBkM2FhMzA2ZjAtNDRkYjhmMzBlZjUzNGM0ZGI5YWNjNmZhNzFmOGE4NjAmZXNpZD05MWM1OWI3ZC0yNjM5LWViMTEtYTgxMy0wMDBkM2EwODViMGY&amp;K=QbgLEZ-sxBBleFgdttcr0g\"><span class=\"s2\"><i>Vietnam<\/i><\/span><\/a><i>,\u00a0<\/i><a href=\"http:\/\/click.dezshira.com\/c\/6\/?T=MTQxNTY1NzM%3AMDItYjIwMzQzLTljMDI4MTFjMTY4OTQ1OWE4MWI5MmIxNWJkZThkZWY2%3Acm9oaW5pLnNpbmdoQGRlenNoaXJhLmNvbQ%3AbGVhZC05OWNkZTM0YjNkYWFlODExYTk2ZTAwMGQzYWEzMDZmMC00NGRiOGYzMGVmNTM0YzRkYjlhY2M2ZmE3MWY4YTg2MA%3AZmFsc2U%3ANTc%3A%3AaHR0cHM6Ly93d3cuZGV6c2hpcmEuY29tL29mZmljZS9zaW5nYXBvcmUuaHRtbD9fY2xkZWU9Y205b2FXNXBMbk5wYm1kb1FHUmxlbk5vYVhKaExtTnZiUSUzZCUzZCZyZWNpcGllbnRpZD1sZWFkLTk5Y2RlMzRiM2RhYWU4MTFhOTZlMDAwZDNhYTMwNmYwLTQ0ZGI4ZjMwZWY1MzRjNGRiOWFjYzZmYTcxZjhhODYwJmVzaWQ9OTFjNTliN2QtMjYzOS1lYjExLWE4MTMtMDAwZDNhMDg1YjBm&amp;K=jcBXy9yTnjAXBRPdV80GFg\"><span class=\"s2\"><i>Singapore<\/i><\/span><\/a><i>,\u00a0<\/i><a href=\"http:\/\/click.dezshira.com\/c\/6\/?T=MTQxNTY1NzM%3AMDItYjIwMzQzLTljMDI4MTFjMTY4OTQ1OWE4MWI5MmIxNWJkZThkZWY2%3Acm9oaW5pLnNpbmdoQGRlenNoaXJhLmNvbQ%3AbGVhZC05OWNkZTM0YjNkYWFlODExYTk2ZTAwMGQzYWEzMDZmMC00NGRiOGYzMGVmNTM0YzRkYjlhY2M2ZmE3MWY4YTg2MA%3AZmFsc2U%3ANTg%3A%3AaHR0cHM6Ly93d3cuZGV6c2hpcmEuY29tL29mZmljZS9pbmRpYS8_X2NsZGVlPWNtOW9hVzVwTG5OcGJtZG9RR1JsZW5Ob2FYSmhMbU52YlElM2QlM2QmcmVjaXBpZW50aWQ9bGVhZC05OWNkZTM0YjNkYWFlODExYTk2ZTAwMGQzYWEzMDZmMC00NGRiOGYzMGVmNTM0YzRkYjlhY2M2ZmE3MWY4YTg2MCZlc2lkPTkxYzU5YjdkLTI2MzktZWIxMS1hODEzLTAwMGQzYTA4NWIwZg&amp;K=ag9E37RVeLsX26oMjOo2LQ\"><span class=\"s2\"><i>India<\/i><\/span><\/a><i>, and\u00a0<\/i><a href=\"http:\/\/click.dezshira.com\/c\/6\/?T=MTQxNTY1NzM%3AMDItYjIwMzQzLTljMDI4MTFjMTY4OTQ1OWE4MWI5MmIxNWJkZThkZWY2%3Acm9oaW5pLnNpbmdoQGRlenNoaXJhLmNvbQ%3AbGVhZC05OWNkZTM0YjNkYWFlODExYTk2ZTAwMGQzYWEzMDZmMC00NGRiOGYzMGVmNTM0YzRkYjlhY2M2ZmE3MWY4YTg2MA%3AZmFsc2U%3ANTk%3A%3AaHR0cHM6Ly93d3cuZGV6c2hpcmEuY29tL29mZmljZS9ydXNzaWE_X2NsZGVlPWNtOW9hVzVwTG5OcGJtZG9RR1JsZW5Ob2FYSmhMbU52YlElM2QlM2QmcmVjaXBpZW50aWQ9bGVhZC05OWNkZTM0YjNkYWFlODExYTk2ZTAwMGQzYWEzMDZmMC00NGRiOGYzMGVmNTM0YzRkYjlhY2M2ZmE3MWY4YTg2MCZlc2lkPTkxYzU5YjdkLTI2MzktZWIxMS1hODEzLTAwMGQzYTA4NWIwZg&amp;K=CyV5V-2RjCJHQI8O3QC9LQ\"><span class=\"s2\"><i>Russia<\/i><\/span><\/a><i>. Readers may write to\u00a0<\/i><a href=\"mailto:info@dezshira.com\"><span class=\"s2\"><i>info@dezshira.com<\/i><\/span><\/a><i>\u00a0for more support.<\/i><\/p>\n","protected":false},"excerpt":{"rendered":"<p>China\u2019s new\u00a0Personal Information Protection Law (PIPL) came into effect on November 1 and is now one of the strictest in the world governing what businesses can do with Chinese people\u2019s personal information. So what do China\u2019s new data privacy laws mean for your company in practice? And how can you make sure you\u2019re compliant with the new regulations? In this article, first published in China Briefing, Thomas Zhang, Dezan Shira&hellip;<\/p>\n","protected":false},"author":38,"featured_media":9079,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[207],"tags":[287,2159,2129,2427,2131],"class_list":["post-9077","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-law","tag-cyber-security","tag-data","tag-data-protection","tag-paywall","tag-user-data"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>What does China\u2019s new data privacy law mean in practice? - Focus - China Britain Business Council<\/title>\n<meta name=\"description\" content=\"China\u2019s new Personal Information Protection Law is expected to have an impact on both local and foreign companies doing business with China\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What does China\u2019s new data privacy law mean in practice? - Focus - China Britain Business Council\" \/>\n<meta property=\"og:description\" content=\"China\u2019s new Personal Information Protection Law is expected to have an impact on both local and foreign companies doing business with China\" \/>\n<meta property=\"og:url\" content=\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/\" \/>\n<meta property=\"og:site_name\" content=\"Focus - China Britain Business Council\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/chinabritainbusinesscouncil\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-07T07:30:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-23T09:48:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/12\/shutterstock_1202221816.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"667\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Elinor Greenhouse\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ChinaBritain\" \/>\n<meta name=\"twitter:site\" content=\"@ChinaBritain\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Elinor Greenhouse\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/\"},\"author\":{\"name\":\"Elinor Greenhouse\",\"@id\":\"https:\/\/focus.cbbc.org\/#\/schema\/person\/e9467e4f57bfab6faebe36d3d318fc19\"},\"headline\":\"What does China\u2019s new data privacy law mean in practice?\",\"datePublished\":\"2021-12-07T07:30:24+00:00\",\"dateModified\":\"2025-04-23T09:48:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/\"},\"wordCount\":1023,\"publisher\":{\"@id\":\"https:\/\/focus.cbbc.org\/#organization\"},\"image\":{\"@id\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/12\/shutterstock_1202221816.jpg\",\"keywords\":[\"cyber security\",\"data\",\"data protection\",\"Paywall\",\"user data\"],\"articleSection\":[\"Law\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/\",\"url\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/\",\"name\":\"What does China\u2019s new data privacy law mean in practice? - Focus - China Britain Business Council\",\"isPartOf\":{\"@id\":\"https:\/\/focus.cbbc.org\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/12\/shutterstock_1202221816.jpg\",\"datePublished\":\"2021-12-07T07:30:24+00:00\",\"dateModified\":\"2025-04-23T09:48:26+00:00\",\"description\":\"China\u2019s new Personal Information Protection Law is expected to have an impact on both local and foreign companies doing business with China\",\"breadcrumb\":{\"@id\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#primaryimage\",\"url\":\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/12\/shutterstock_1202221816.jpg\",\"contentUrl\":\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/12\/shutterstock_1202221816.jpg\",\"width\":1000,\"height\":667},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/focus.cbbc.org\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What does China\u2019s new data privacy law mean in practice?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/focus.cbbc.org\/#website\",\"url\":\"https:\/\/focus.cbbc.org\/\",\"name\":\"CHINA-BRITAIN BUSINESS FOCUS\",\"description\":\"FOCUS is the content arm of The China-Britain Business Council\",\"publisher\":{\"@id\":\"https:\/\/focus.cbbc.org\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/focus.cbbc.org\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/focus.cbbc.org\/#organization\",\"name\":\"CBBC\",\"url\":\"https:\/\/focus.cbbc.org\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/focus.cbbc.org\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2020\/05\/Asset-1.svg\",\"contentUrl\":\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2020\/05\/Asset-1.svg\",\"width\":1,\"height\":1,\"caption\":\"CBBC\"},\"image\":{\"@id\":\"https:\/\/focus.cbbc.org\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/chinabritainbusinesscouncil\",\"https:\/\/x.com\/ChinaBritain\",\"https:\/\/www.linkedin.com\/company\/china-britain-business-council\/\",\"https:\/\/en.wikipedia.org\/wiki\/China\u2013Britain_Business_Council\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/focus.cbbc.org\/#\/schema\/person\/e9467e4f57bfab6faebe36d3d318fc19\",\"name\":\"Elinor Greenhouse\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/focus.cbbc.org\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2024\/07\/cropped-Elinor-Headshot-96x96.jpg\",\"contentUrl\":\"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2024\/07\/cropped-Elinor-Headshot-96x96.jpg\",\"caption\":\"Elinor Greenhouse\"},\"description\":\"Elinor Greenhouse is CBBC's sector lead for tech &amp; innovation, healthcare &amp; life sciences. For more information and to discuss your strategy in China\u2019s knowledge economy contact Elinor at Elinor.Greenhouse@cbbc.org.\",\"url\":\"https:\/\/focus.cbbc.org\/author\/elinor-greenhouse\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What does China\u2019s new data privacy law mean in practice? - Focus - China Britain Business Council","description":"China\u2019s new Personal Information Protection Law is expected to have an impact on both local and foreign companies doing business with China","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/","og_locale":"en_GB","og_type":"article","og_title":"What does China\u2019s new data privacy law mean in practice? - Focus - China Britain Business Council","og_description":"China\u2019s new Personal Information Protection Law is expected to have an impact on both local and foreign companies doing business with China","og_url":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/","og_site_name":"Focus - China Britain Business Council","article_publisher":"https:\/\/www.facebook.com\/chinabritainbusinesscouncil","article_published_time":"2021-12-07T07:30:24+00:00","article_modified_time":"2025-04-23T09:48:26+00:00","og_image":[{"width":1000,"height":667,"url":"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/12\/shutterstock_1202221816.jpg","type":"image\/jpeg"}],"author":"Elinor Greenhouse","twitter_card":"summary_large_image","twitter_creator":"@ChinaBritain","twitter_site":"@ChinaBritain","twitter_misc":{"Written by":"Elinor Greenhouse","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#article","isPartOf":{"@id":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/"},"author":{"name":"Elinor Greenhouse","@id":"https:\/\/focus.cbbc.org\/#\/schema\/person\/e9467e4f57bfab6faebe36d3d318fc19"},"headline":"What does China\u2019s new data privacy law mean in practice?","datePublished":"2021-12-07T07:30:24+00:00","dateModified":"2025-04-23T09:48:26+00:00","mainEntityOfPage":{"@id":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/"},"wordCount":1023,"publisher":{"@id":"https:\/\/focus.cbbc.org\/#organization"},"image":{"@id":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#primaryimage"},"thumbnailUrl":"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/12\/shutterstock_1202221816.jpg","keywords":["cyber security","data","data protection","Paywall","user data"],"articleSection":["Law"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/","url":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/","name":"What does China\u2019s new data privacy law mean in practice? - Focus - China Britain Business Council","isPartOf":{"@id":"https:\/\/focus.cbbc.org\/#website"},"primaryImageOfPage":{"@id":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#primaryimage"},"image":{"@id":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#primaryimage"},"thumbnailUrl":"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/12\/shutterstock_1202221816.jpg","datePublished":"2021-12-07T07:30:24+00:00","dateModified":"2025-04-23T09:48:26+00:00","description":"China\u2019s new Personal Information Protection Law is expected to have an impact on both local and foreign companies doing business with China","breadcrumb":{"@id":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#primaryimage","url":"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/12\/shutterstock_1202221816.jpg","contentUrl":"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2021\/12\/shutterstock_1202221816.jpg","width":1000,"height":667},{"@type":"BreadcrumbList","@id":"https:\/\/focus.cbbc.org\/what-does-chinas-new-data-privacy-law-mean-for-uk-companies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/focus.cbbc.org\/"},{"@type":"ListItem","position":2,"name":"What does China\u2019s new data privacy law mean in practice?"}]},{"@type":"WebSite","@id":"https:\/\/focus.cbbc.org\/#website","url":"https:\/\/focus.cbbc.org\/","name":"CHINA-BRITAIN BUSINESS FOCUS","description":"FOCUS is the content arm of The China-Britain Business Council","publisher":{"@id":"https:\/\/focus.cbbc.org\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/focus.cbbc.org\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/focus.cbbc.org\/#organization","name":"CBBC","url":"https:\/\/focus.cbbc.org\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/focus.cbbc.org\/#\/schema\/logo\/image\/","url":"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2020\/05\/Asset-1.svg","contentUrl":"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2020\/05\/Asset-1.svg","width":1,"height":1,"caption":"CBBC"},"image":{"@id":"https:\/\/focus.cbbc.org\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/chinabritainbusinesscouncil","https:\/\/x.com\/ChinaBritain","https:\/\/www.linkedin.com\/company\/china-britain-business-council\/","https:\/\/en.wikipedia.org\/wiki\/China\u2013Britain_Business_Council"]},{"@type":"Person","@id":"https:\/\/focus.cbbc.org\/#\/schema\/person\/e9467e4f57bfab6faebe36d3d318fc19","name":"Elinor Greenhouse","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/focus.cbbc.org\/#\/schema\/person\/image\/","url":"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2024\/07\/cropped-Elinor-Headshot-96x96.jpg","contentUrl":"https:\/\/focus.cbbc.org\/wp-content\/uploads\/2024\/07\/cropped-Elinor-Headshot-96x96.jpg","caption":"Elinor Greenhouse"},"description":"Elinor Greenhouse is CBBC's sector lead for tech &amp; innovation, healthcare &amp; life sciences. For more information and to discuss your strategy in China\u2019s knowledge economy contact Elinor at Elinor.Greenhouse@cbbc.org.","url":"https:\/\/focus.cbbc.org\/author\/elinor-greenhouse\/"}]}},"_links":{"self":[{"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/posts\/9077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/users\/38"}],"replies":[{"embeddable":true,"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/comments?post=9077"}],"version-history":[{"count":6,"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/posts\/9077\/revisions"}],"predecessor-version":[{"id":9100,"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/posts\/9077\/revisions\/9100"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/media\/9079"}],"wp:attachment":[{"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/media?parent=9077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/categories?post=9077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/focus.cbbc.org\/wp-json\/wp\/v2\/tags?post=9077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}