On November 14, 2021, the Cyberspace Administration of China (CAC) released the Network Data Security Management Regulation (Exposure Draft) (the ‘Regulation’), seeking public opinions until December 13, 2021.

This extensive document is based on the rules stipulated in China’s existing data and cybersecurity framework composed of the Cybersecurity Law (CSL), the Data Security Law (DSL), and the Personal Information Protection Law (PIPL), and fleshes out legal requirements for companies engaged in the processing of ‘important’ data and personal information of users based in mainland China in particular.

We provide a brief overview of the four main chapters of the Regulation, pertaining to cybersecurity responsibilities, protection of personal information, cross-border data transfer, and legal obligations of internet platforms.

No results found