The long-awaited Personal Information Protection Law of the People's Republic of China (the "PIPL") was adopted at the 30th session of the Standing Committee of the 13th National People's Congress on August 20, 2021 and will take effect on November 1, 2021.
Compared with the second draft, the final version of the PIPL has several changes that deserve significant attention. In particular, the PIPL refers to the Constitution Law of the People’s Republic of China (“China”) as the legislative basis, signifying the importance attached by Chinese lawmakers to personal information protection.
The PIPL only provides for a short grace period of 73 calendar days from its adoption to the law coming into effect, which creates a challenging timeline for relevant companies to take the necessary compliance actions. In this article, we outline the key legal requirements under the PIPL and provide businesses with practical compliance suggestions on their collection and processing activities in relation to personal information.
Asia Pacific Risk Assurance Leader, Mainland China and Hong Kong Digital Trust & Risk Leader, PwC Hong Kong
Tel: + 2289 2919