{"id":2383,"date":"2021-09-10T10:25:24","date_gmt":"2021-09-10T02:25:24","guid":{"rendered":"https:\/\/www.boasecohencollins.com\/?p=2383"},"modified":"2021-09-10T10:25:30","modified_gmt":"2021-09-10T02:25:30","slug":"china-gets-tough-on-data-protection","status":"publish","type":"post","link":"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/","title":{"rendered":"China gets tough on data protection"},"content":{"rendered":"\n

By Allison Lee<\/strong><\/p>\n\n\n\n

Hong Kong, 10 September 2021:<\/strong> China\u2019s long-awaited data privacy legislation, the Personal Information Protection Law (PIPL), will take effect on 1 November. While the law does not directly apply to Hong Kong, which has its own Personal Data (Privacy) Ordinance, it does have extraterritorial application, meaning companies in Hong Kong and elsewhere with business connections to the mainland need to take immediate action to comply with its requirements.<\/p>\n\n\n\n

The PIPL, formally approved by the Standing Committee of the National People\u2019s Congress on 20 August, is seen as one of the world\u2019s strongest laws on personal data security, making it significantly harder for tech firms in China to access and use consumer information. It requires that the processing of personal information shall abide by the principles of legality, fairness, good faith, openness and transparency.<\/p>\n\n\n\n

Underlying the PIPL is the fundamental principle that collection and processing of personal information should be limited to the minimum level necessary to fulfil the specific purpose. Processing information beyond this level may be unlawful, even if individual consent is obtained.<\/p>\n\n\n\n

Rights of the individual<\/strong><\/p>\n\n\n\n

The PIPL will give citizens the right to access and obtain a copy of their personal information from firms and request that the data be corrected or deleted (Articles 45 to 47). Further, individuals can opt out of targeted marketing, including push notifications and pop-ups (Article 24).<\/p>\n\n\n\n

Companies and organisations will need to obtain individual consent to access sensitive personal information such as biometrics, medical health records, financial accounts and a person\u2019s location (Article 29). When processing personal information of a minor under the age of 14, firms will need to obtain consent from the parent or guardian and establish specific processing rules (Article 31).<\/p>\n\n\n\n

There are certain instances where consent is not required, including: a contract with an individual or for the purposes of human resources management according to established employment policies; where necessary to perform statutory duties; where necessary for the protection of life, health or property; or in the process of news reporting (Article 13).<\/p>\n\n\n\n

The PIPL has similarities with the EU\u2019s General Data Protection Regulation (GDPR), which came into effect in 2018 and imposed strict controls on how companies handle personal data within Europe. However, the mainland\u2019s new law is stronger when it comes to cross-border data transfers.<\/p>\n\n\n\n

The new law stipulates that firms with critical information infrastructure and large amounts of personal information must store this data within China (Article 40). If they wish to transfer it out of the mainland, they will first need separate consent from individuals (Article 39). Then, they will have to meet certain requirements, such as passing a security assessment made by the state cyberspace authorities and obtaining the required certification or entering into a standard contract with the overseas recipient as prescribed by the cyberspace authorities (Article 38).<\/p>\n\n\n\n

Obligations for foreign firms<\/strong><\/p>\n\n\n\n

The PIPL\u2019s provisions on extraterritorial application are clear. Foreign businesses and organisations, including those in Hong Kong, which process personal information of individuals in the mainland for the purposes of offering products or services to them, or analysing and assessing their behaviour, must fall in line. A key requirement is that foreign firms should establish a dedicated entity or appoint a legal representative based in the mainland for data compliance (Article 53). <\/p>\n\n\n\n

Given the close business ties between Hong Kong and the mainland, the new law poses challenges for businesses in the territory, particularly those in the retail and e-commerce sector which collect and process consumer data. The PIPL\u2019s regulations on the transfer of data also cover financial accounts, meaning new compliance procedures for financial institutions.<\/p>\n\n\n\n

Firms which contravene the PIPL may face a maximum fine of RMB 50 million (about HK$60 million) or 5% of annual turnover. Other penalties can include suspension of operation or loss of licence.<\/p>\n\n\n\n

Summary<\/strong><\/p>\n\n\n\n

The PIPL appears to be the final part of China\u2019s new data management regime, following on from the Cybersecurity Law passed in 2017 and the recent Data Security Law. Together, the three pieces of legislation give the mainland a comprehensive data protection legal framework.<\/p>\n\n\n\n

The new law will usher in distinct changes in the way cross-border business is carried out. In order to ensure compliance with its obligations, businesses are recommended to become familiar with the PIPL and to review and amend their practices accordingly. If in doubt, they should seek legal advice.<\/p>\n\n\n\n

A Senior Associate with BC&C, Allison Lee handles a diverse range of civil litigation matters including shareholders\u2019 disputes, contractual disputes, employment and immigration. In addition to her law qualifications, she has a Master\u2019s degree in science, specialising in electronic commerce and internet computing, and a Bachelor\u2019s degree in math majoring in Computer Science. She can be contacted at <\/strong>allison@boasecohencollins.com<\/strong><\/a>.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

By Allison Lee Hong Kong, 10 September 2021: China\u2019s lo […]<\/p>\n","protected":false},"author":2,"featured_media":2380,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[54],"tags":[],"class_list":["post-2383","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-54"],"yoast_head":"\nChina gets tough on data protection - \u5e03\u9ad8\u6c5f\u5f8b\u5e08\u884c<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"China gets tough on data protection - \u5e03\u9ad8\u6c5f\u5f8b\u5e08\u884c\" \/>\n<meta property=\"og:description\" content=\"By Allison Lee Hong Kong, 10 September 2021: China\u2019s lo […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/\" \/>\n<meta property=\"og:site_name\" content=\"\u5e03\u9ad8\u6c5f\u5f8b\u5e08\u884c\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-10T02:25:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-09-10T02:25:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/ChinaPrivacy_PHOTO.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1370\" \/>\n\t<meta property=\"og:image:height\" content=\"650\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Niall Donnelly\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"Niall Donnelly\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/\",\"url\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/\",\"name\":\"China gets tough on data protection - \u5e03\u9ad8\u6c5f\u5f8b\u5e08\u884c\",\"isPartOf\":{\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/ChinaPrivacy_PHOTO.jpg\",\"datePublished\":\"2021-09-10T02:25:24+00:00\",\"dateModified\":\"2021-09-10T02:25:30+00:00\",\"author\":{\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/#\/schema\/person\/5b77a07b7692a02ba65ff29d05c8f3b5\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/#primaryimage\",\"url\":\"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/ChinaPrivacy_PHOTO.jpg\",\"contentUrl\":\"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/ChinaPrivacy_PHOTO.jpg\",\"width\":1370,\"height\":650},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"China gets tough on data protection\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/#website\",\"url\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/\",\"name\":\"\u5e03\u9ad8\u6c5f\u5f8b\u5e08\u884c\",\"description\":\"2018\u53ca2019\u5e74\u5ea6\u6700\u4f73\u8bc9\u8bbc\u53ca\u4e89\u8bae\u89e3\u51b3\u5f8b\u5e08\u884c\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/#\/schema\/person\/5b77a07b7692a02ba65ff29d05c8f3b5\",\"name\":\"Niall Donnelly\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.boasecohencollins.com\/zh-hans\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/54b15b260b9ed40d8e860705893b81f8cd72e1f211fea70f35ec1dcafc686171?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/54b15b260b9ed40d8e860705893b81f8cd72e1f211fea70f35ec1dcafc686171?s=96&d=mm&r=g\",\"caption\":\"Niall Donnelly\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"China gets tough on data protection - \u5e03\u9ad8\u6c5f\u5f8b\u5e08\u884c","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/","og_locale":"zh_CN","og_type":"article","og_title":"China gets tough on data protection - \u5e03\u9ad8\u6c5f\u5f8b\u5e08\u884c","og_description":"By Allison Lee Hong Kong, 10 September 2021: China\u2019s lo […]","og_url":"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/","og_site_name":"\u5e03\u9ad8\u6c5f\u5f8b\u5e08\u884c","article_published_time":"2021-09-10T02:25:24+00:00","article_modified_time":"2021-09-10T02:25:30+00:00","og_image":[{"width":1370,"height":650,"url":"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/ChinaPrivacy_PHOTO.jpg","type":"image\/jpeg"}],"author":"Niall Donnelly","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"Niall Donnelly","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"4 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/","url":"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/","name":"China gets tough on data protection - \u5e03\u9ad8\u6c5f\u5f8b\u5e08\u884c","isPartOf":{"@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/#primaryimage"},"image":{"@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/#primaryimage"},"thumbnailUrl":"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/ChinaPrivacy_PHOTO.jpg","datePublished":"2021-09-10T02:25:24+00:00","dateModified":"2021-09-10T02:25:30+00:00","author":{"@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/#\/schema\/person\/5b77a07b7692a02ba65ff29d05c8f3b5"},"breadcrumb":{"@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/"]}]},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/#primaryimage","url":"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/ChinaPrivacy_PHOTO.jpg","contentUrl":"https:\/\/www.boasecohencollins.com\/wp-content\/uploads\/ChinaPrivacy_PHOTO.jpg","width":1370,"height":650},{"@type":"BreadcrumbList","@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/%e7%bd%91%e8%aa%8c\/china-gets-tough-on-data-protection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.boasecohencollins.com\/zh-hans\/"},{"@type":"ListItem","position":2,"name":"China gets tough on data protection"}]},{"@type":"WebSite","@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/#website","url":"https:\/\/www.boasecohencollins.com\/zh-hans\/","name":"\u5e03\u9ad8\u6c5f\u5f8b\u5e08\u884c","description":"2018\u53ca2019\u5e74\u5ea6\u6700\u4f73\u8bc9\u8bbc\u53ca\u4e89\u8bae\u89e3\u51b3\u5f8b\u5e08\u884c","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.boasecohencollins.com\/zh-hans\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/#\/schema\/person\/5b77a07b7692a02ba65ff29d05c8f3b5","name":"Niall Donnelly","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.boasecohencollins.com\/zh-hans\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/54b15b260b9ed40d8e860705893b81f8cd72e1f211fea70f35ec1dcafc686171?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/54b15b260b9ed40d8e860705893b81f8cd72e1f211fea70f35ec1dcafc686171?s=96&d=mm&r=g","caption":"Niall Donnelly"}}]}},"_links":{"self":[{"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/posts\/2383","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/comments?post=2383"}],"version-history":[{"count":1,"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/posts\/2383\/revisions"}],"predecessor-version":[{"id":2385,"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/posts\/2383\/revisions\/2385"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/media\/2380"}],"wp:attachment":[{"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/media?parent=2383"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/categories?post=2383"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.boasecohencollins.com\/zh-hans\/wp-json\/wp\/v2\/tags?post=2383"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}