In the News: Personal Data Compliance Audit; Dentons Leaves China; and China-Saudi ETF-Connect

The draft measures require all processors of personal data to conduct annual audits to ensure compliance with personal data protection laws. Companies that process the personal data of over one million individuals are required to conduct audits every year, while other companies are to conduct the same every two years. The scope of audits will include checking whether any overseas transfers of personal data were conducted with the approval from relevant Chinese authorities, and whether any transfers were made to foreign judicial or enforcement agencies. Companies must also ensure that any overseas recipient of personal data is informed about relevant Chinese regulatory obligations regarding the handling of such data, and should ensure that the overseas recipient has taken measures to fulfill any such obligations.