Data Protection in 2022: From Regulatory Refinement to Exploitation of Data Value

Summary

---

|

• 2022 was a year in which China's data protection legislation was further refined
• While focusing on ensuring data security, the Chinese government also began to recognize and emphasize the value and utility of data
• A cross-border data transfer mechanism has finally been created
• Sector-specific rules will provide essential guidance to operators

In 2022, China's data protection legislation entered a phase of refinement. The regulatory authorities developed and issued implementing rules to enforce the data protection regimes established by the Data Security Law (DSL) (数据安全法) and the Personal Information Protection Law (PIPL) (个人信息保护法). A number of developments are worth noting in particular.

Since September 1, companies whose data processing activities fall into the scope of the security assessment have begun to prepare to apply for the security assessment for their cross-border transfers of data