Personal Information Protection Law of the People’s Republic of China (PIPL)

The Personal Information Protection Law (PIPL) of the People’s Republic of China is China’s comprehensive data protection legislation governing the processing, collection, storage, use, disclosure, and cross-border transfer of personal information. Effective from 1 November 2021, the PIPL establishes obligations for personal information processors, provides individual rights, introduces consent and transparency requirements, regulates sensitive personal information processing, and imposes strict requirements for cross-border data transfers. The law is often compared with the EU General Data Protection Regulation (GDPR) due to its comprehensive privacy framework and extraterritorial application.