Shanghai improves data protection

Shanghai is raising the level of data protection in the city. A pilot program will classify and tiered data categories and develop catalogs of important data. To this end, the program will identify typical cases, develop general methods, and provide training to meet needs. The background is the Data Security Law (DSL), which includes classified… Continue reading Shanghai improves data protection

Beijing unveils two-year Metaverse plan

China is now taking the Metaverse for a big leap. The project is based on the Beijing Urban Sub-Center Metaverse Innovation and Development Action Plan (2022- 2024), which was published in August 2022. The Chinese capital’s innovation plan stipulates that all urban districts should increasingly promote industries and companies that have a connection to the… Continue reading Beijing unveils two-year Metaverse plan

Cross-Border Data Transfer outside China: Attentive to the Rectification Period

Companies operating in China should be attentive to the Measures on Security Assessment of Cross-Border Data Transfers (Measures), published on July 7, 2022, as they take effect as early as September 1, 2022.  Among other things, the Measures require data processors to conduct a security assessment when: 1. Providing critical data outside of China. 2.… Continue reading Cross-Border Data Transfer outside China: Attentive to the Rectification Period

Compliance Requirements for Software Development Kits (SDK)

China continues to regulate the collection of private data in apps. For example, the importance of compliance with software development kits (SDKs) has increased significantly. Since June 2021, the authorities have been cracking down on the illegal use of SDKs in apps with SDK Security Special Actions. A software development kit is a collection of… Continue reading Compliance Requirements for Software Development Kits (SDK)

Certification for Systems of Data Security Management

The Chinese Government has been encouraging companies to have mobile app certifications for some time. Search engines and app stores are encouraged to prioritize applications from companies that have certifications. Now, enterprise data security management certification is also to be developed. In early June 2022, the General Administration of Market Supervision and the Office of… Continue reading Certification for Systems of Data Security Management

New Data Exchanges in China

On April 10, 2022, the Chinese government announced to accelerate the construction of the unified domestic market. Part of this is to also establish a data market to promote Big Data applications and AI development, focusing on data security and control of cross-border data transfer. To be allowed to provide data outside China, data processors… Continue reading New Data Exchanges in China

Data Compliance Can Prevent Penalties

Due to the three laws in the field of data – the Cyber Security Law, the Data Security Law and the Personal Information Protection Law – companies in China must set up a complete system to comply with data protection and security regulations. A good data compliance system can avoid warnings from administrative authorities during… Continue reading Data Compliance Can Prevent Penalties

Recoupling through Controlled Localization

The Ukraine conflict is increasingly impacting the business of foreign companies in China. China is responding to massive Western sanctions on Russia by accelerating decoupling in order to become self-sufficient more quickly. Western companies are responding by recoupling their Chinese branch or subsidiary through controlled localization. Headquarters are putting their Chinese subsidiaries back on a… Continue reading Recoupling through Controlled Localization

First Tribunal for Data Resources Established

China continues to forge ahead in the development of the digital economy. For example, on May 18, 2022, China’s first professional court to handle cases related to data resources was established – the Data Resource Tribunal of Wenzhou Ouhai District People’s Court. The background: with the development of the digital economy, the production, storage, use… Continue reading First Tribunal for Data Resources Established

New Specifications: IT Security of Apps in China

On November 1, 2022, the national standard GB/T 41391-2022 “Information Security Technology Basic Requirements for Mobile Internet Applications (Apps) Collecting Personal Information,” published in April, will come into force. It applies to all app operators in China and is intended to regulate personal information collection activities. This standard is relevant to all companies that operate… Continue reading New Specifications: IT Security of Apps in China