PIPL (Personal Information Protection Law)
Legal
China’s comprehensive data-protection law, effective November 1, 2021. Resembles GDPR in structure and adds heavy cross-border transfer controls; reaches foreign firms that handle the personal information of individuals in China.