Update in the PRC Data Regulatory Regime – A Closer Look at the Second Draft of PRC Data Protection Laws (May 2021)
Client Briefings
Introduction
Share
On 29 April 2021, the Standing Committee of the National People's Congress released the second draft of the Data Security Law (Draft DSL) and the Personal Information Protection Law (Draft PIPL) for public comment until 28 May 2021. The Draft DSL and the Draft PIPL mark another step by PRC regulators and legislators towards protecting data sovereignty and regulating data-related activities in line with internationally recognised practice. These draft laws build on the PRC Cyber-security Law which came into force in 2017 (CSL).
The Draft DSL and the Draft PIPL demonstrate PRC regulators' focus on developing the regulatory environment with respect to data matters by adding more granularity to the existing legal framework. In this briefing, we highlight a few key regulatory developments that will be vital to international institutions in managing data issues with respect to their PRC businesses.
