China?s personal information protection law ? tsaaro

China?s personal information protection law ? tsaaro

China?s Personal Information Protection Law (PIPL) is a comprehensive data protection legislation that was passed by the Standing Committee of the National People?s Congress on August 20, 2021, and is set to take effect on November 1, 2021. The law seeks to protect the privacy rights of individuals and regulate the collection, use, storage, transmission, and processing of personal information by entities in China. Here are some of the key provisions of the PIPL: Definition of Personal Information: The PIPL defines personal information broadly as any information that can be used to identify an individual, including name, date of birth, ID number, biometric data, and online identifiers. Consent Requirements: Entities that collect personal information must obtain consent from the individual and clearly inform them of the purpose, method, and scope of the data collection. Cross-border Data Transfer: The law imposes restrictions on cross-border transfer of personal data, requiring entities to conduct a security assessment before transferring data outside of China. Rights of Individuals: The law grants individuals the right to access, correct, delete, and withdraw consent for the use of their personal information. Data Protection Officers: Entities that process large amounts of personal information are required to appoint a dedicated data protection officer. Enforcement: The law establishes fines and penalties for violations, including up to 50 million yuan (approximately $7.7 million USD) or 5% of the previous year?s revenue, whichever is higher. Overall, the PIPL places significant obligations on entities that collect and process personal information and aims to strengthen the protection of individuals? privacy rights in China.