Regulations › Rest of world › China
PIPL
Personal Information Protection Law (China)
WhenIn effect since 1 November 2021
Who enforces itCyberspace Administration of China
Who it applies toOrganizations processing personal information in China, or of people in China for certain purposes.
Tell the regulatorImmediately take remedial measures and notify the regulator of a leak, alteration or loss
DPO requiredHandlers processing personal information above the volume set by the CAC must appoint a person…
RegistrationNo general controller registration
Transfers abroadTransfers need CAC security assessment, certification or the CAC standard contract, plus notic…
Request deadlineHandle requests promptly
Maximum fineUp to RMB 50 million or 5% of prior-year revenue
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws