14,952
edits
Changes
Jump to navigation
Jump to search
Personal Information Protection Law (view source)
Revision as of 18:10, 10 August 2022
, 2 years agoCreated page with "The Personal Information Protection Law (PIPL) is designed to protect personal information, regulate its processing, and promote the use of personal information.<ref>[http://e..."
The Personal Information Protection Law (PIPL) is designed to protect personal information, regulate its processing, and promote the use of personal information.<ref>[http://en.npc.gov.cn.cdurl.cn/2021-12/29/c_694559.htm PIPL, Translations of Laws, The National People's Congress]</ref> It is China's version of the EU's [[GDPR]] as it has extraterritorial scope whenever businesses outside China process the personal information of Chinese residents for providing products or services and analyzing and evaluating information about domestic residents.<ref>[https://www.trulioo.com/blog/china-data-protection-law China's Data Protection Law, Trulioo]</ref> Personal information under this law is defined as information related to identified or identifiable natural persons recorded by electronic or other means.
==Roles and Rights==
This law relies on personal information processors and entrusted parties. ''Person information processors'' decide the purpose, period, and means of processing; personal information categories; protection measures; and parties' rights and obligations. The entrusted parties process information in accordance with the agreement and cannot go beyond those parameters, or engage sub-processors without the consent of the personal information processor. Any cross-border transfer requires an assessment, certification, contract, or compliance with other laws and regulations. Separate disclosure to and consent from the individual is required.<ref>[https://www.trulioo.com/blog/china-data-protection-law China's Data Protection Law, Trulioo]</ref>
This law reserves the right for:
# China's national cyberspace department to add companies and individuals infringing on individuals’ rights to a restricted list and
# take countermeasures against any country or region that places prohibitive, restrictive, or discriminatory measures against China.<ref>[https://www.trulioo.com/blog/china-data-protection-law China's Data Protection Law, Trulioo]</ref>
==History==
The PIPL went into effect on November 17, 2021.
==ICANN's POV==
==References==
==Roles and Rights==
This law relies on personal information processors and entrusted parties. ''Person information processors'' decide the purpose, period, and means of processing; personal information categories; protection measures; and parties' rights and obligations. The entrusted parties process information in accordance with the agreement and cannot go beyond those parameters, or engage sub-processors without the consent of the personal information processor. Any cross-border transfer requires an assessment, certification, contract, or compliance with other laws and regulations. Separate disclosure to and consent from the individual is required.<ref>[https://www.trulioo.com/blog/china-data-protection-law China's Data Protection Law, Trulioo]</ref>
This law reserves the right for:
# China's national cyberspace department to add companies and individuals infringing on individuals’ rights to a restricted list and
# take countermeasures against any country or region that places prohibitive, restrictive, or discriminatory measures against China.<ref>[https://www.trulioo.com/blog/china-data-protection-law China's Data Protection Law, Trulioo]</ref>
==History==
The PIPL went into effect on November 17, 2021.
==ICANN's POV==
==References==