The audit on personal data protection is coming

The Cyberspace Administration of China (CAC) published the Administrative Measures for the Audit of Personal Information Protection Compliance for Comment in August. The aim is to operationalize the regular compliance audit for processors of personal information in accordance with Article 54 and 64 of the Personal Information Protection Law (PIPL). The administrative measures specify the… Continue reading The audit on personal data protection is coming

Violation of data protection: RMB 50 million fine

On September 6, 2023, after a 14-month review, the Cyberspace Administration of China (CAC) announced that the private platform China National Knowledge Infrastructure (CNKI) was fined RMB 50 million for the unlawful processing of personal data. CNKI is one of the leading academic platforms, digital learning platforms and knowledge bases in China, and its main operators… Continue reading Violation of data protection: RMB 50 million fine

Verification of the processing personal information

On August 3, Cyberspace Administration of China (CAC) issued draft administrative guidelines for privacy-compliant reviews of personal information and related reference points for public expression. The goal of the documents is to provide regulatory oversight of data privacy compliance. However, data processors are also expected to self-regulate and increase their awareness of the need to… Continue reading Verification of the processing personal information

China discloses algorithms

Deep synthesis service providers that have an influence on public opinion or social mobilization capabilities must register and implement procedures to modify and cancel registration. This also applies to technical supporters of deep synthesis services. Deep synthesis technology refers to the use of deep learning, virtual reality and other synthesis algorithms to create text, images,… Continue reading China discloses algorithms

Standard contract for data export

On May 30, 2023, the Cyberspace Administration of China (CAC) published a guide for the registration of the Standard Contract for Personal Data Export, which explains the process, materials and results of the registration of the Standard Contract for Personal Data Export and provides some template for the registration of materials. The Standard Contract Measures… Continue reading Standard contract for data export

IP and Data in Franchising in China

Enterprises that want to enter the Chinese market through international franchising should prepare a comprehensive IPR layout in advance and pay attention to data protection in their activities. Although a registered trademark is the most important resource in the franchise system, in addition, the uniform decoration plans of franchise stores, window designs, original advertising slogans,… Continue reading IP and Data in Franchising in China

Data Export Security Assessment: All Data Processors Are Involved

With the enactment of China’s Cybersecurity Law (CSL), Data Security Law (DSL), and Personal Information Protection Law (PIPL), security management and assessment of cross-border data transfer became a key issue. Following these three laws, China’s Cyberspace Administration (CAC) published the Measures on Data Export Security Assessment (Draft for Comments) on October 29, 2021, which provides… Continue reading Data Export Security Assessment: All Data Processors Are Involved

Blockchain Makes Evidence Secure

The use of public blockchains and cryptocurrency trading have been heavily restricted in China since 2017. However, in 2019, the Chinese government realized that this technology is not only a risk of losing control, but can be very useful. Since then, it has been trying to target blockchain technology to improve cybersecurity and build a… Continue reading Blockchain Makes Evidence Secure