Clifford Chance

PRC Passes Milestone Legislation for Personal Information Protection

September 10, 2021

On 20 August 2021, the Standing Committee of the National People's Congress of the PRC passed the PRC Personal Information Protection Law (the PIPL), which will take effect on 1 November 2021. This is the most comprehensive personal information protection law enacted in the PRC so far. It will form a core component of the PRC's legal framework governing data, alongside the Cybersecurity Law and the recently enacted Data Security Law.

The PIPL marks a major milestone in the maturation of the PRC's data privacy regime. Although in many respects the PIPL echoes other personal data protection laws internationally, such as the European Union's General Data Protection Regulation (GDPR), multinational companies will need to be mindful of important differences when considering their compliance processes and controls.

Download PDF