China's First Personal Information Protection Law is about to take effect - Are you ready?

August 2021

The long-awaited Personal Information Protection Law of the People's Republic of China (the "PIPL") was adopted at the 30th session of the Standing Committee of the 13th National People's Congress on August 20, 2021 and will take effect on November 1, 2021.

Compared with the second draft, the final version of the PIPL has several changes that deserve significant attention. In particular, the PIPL refers to the Constitution Law of the People’s Republic of China (“China”) as the legislative basis, signifying the importance attached by Chinese lawmakers to personal information protection.

The PIPL only provides for a short grace period of 73 calendar days from its adoption to the law coming into effect, which creates a challenging timeline for relevant companies to take the necessary compliance actions. In this article, we outline the key legal requirements under the PIPL and provide businesses with practical compliance suggestions on their collection and processing activities in relation to personal information.

china personal information protection law aug2021

Contact us

Wilson Chow

China Artificial Intelligence Leader and Global Technology, Media and Telecommunications Industry Leader, PwC China

Tel: + [86] (755) 8261 8886

Jianbin Gao

Mainland China TMT Leader, PwC China

Tel: +[86] (21) 2323 3362

Jennifer Ho

Asia Pacific Risk Services Leader, Mainland China and Hong Kong Digital Trust & Risk Leader, PwC Hong Kong

Tel: +[852] 2289 2919

Lisa Li

Mainland China Digital Trust & Risk - Cybersecurity and Privacy Leader, PwC China

Tel: +[86] (10) 6533 2312

Follow us