Clifford Chance

China Finally Has Its State Council Level Legislation for Data Security

1 November 2024

On 30 September 2024, the State Council of the People's Republic of China promulgated the Administrative Regulations on Cyber Data Security (2024) (the "CDS Regulations"), which will take effect from 1 January 2025. The CDS Regulations supplement the three pillars of China's existing data security protection regime, namely the PRC Cybersecurity Law (2017) (the "CSL"), the PRC Personal Information Protection Law (2021) (the "PIPL") and the PRC Data Security Law (2021) (the "DSL", together with the CSL and the PIPL collectively the "China Data Laws").

This briefing provides an in-depth analysis of the key new requirements introduced by the CDS Regulations and their relevant impact.

Download PDF