The Cyber-security Law of the People's Republic of China (the Law) took effect on 1 June 2017. The Law applies to everyone who operates networks in the PRC and will have particular impact on multinational corporations. The Cyberspace Administration of China (CAC) has issued a series of regulations implementing the law, and has also asked the public for comments on other proposed implementing rules, including measures affecting the transfer of personal data outside the PRC.