China’s PIPL Takes Effect: Your Questions Answered
China’s Personal Information Protection Law “PIPL’, takes effect on 1 November 2021. The law was passed by the National People’s Congress of the People’s Republic of China on 20 August 2021, giving organizations months to prepare and implement necessary compliance measures. The PIPL provides direction on many topics, including rules for the processing of personal and sensitive information including legal basis and disclosure requirements. The law also introduces rules for personal information protection processors, as well as data subject rights, and outlines requirements regarding international data transfers to third parties.
Watch OneTrust DataGuidance and a returning panel of experts to discuss the current state of the law and its enforcement status, as well as address questions from the audience in the following areas: scope of application, lawful basis of processing, cross border data transfers/data localization, personal liability, DPO appointment, DPIAs, sensitive data, and data subject rights.
Key Takeaways Include:
- Analysis of personal information handler obligations
- Steps to take in preparation for the law’s enforcement
- Clarification on further regulation to come