Cybersecurity

Data processors may not take biometric features as the sole method of authenticating individuals' identities

Compliance advice that recognizes business necessities is crucial for effective in-house work

Apps are required to inform users of third party use of their personal information

Different types of internet platforms bear different responsibilities

Jianwei (Jerry) Fang and Runyang Liu of Zhong Lun Law Firm highlight provisions from the newly released Measures for the Security Assessment of Overseas Transfer of Data (Draft for Comments) issued by the Cyberspace Administration of China (CAC) and discuss the issues arising out of outbound data transfer

Hong Kong IPOs also subject to cybersecurity review; social, sustainability bond issuance pilot for foreign issuers; and U.S. law bars new equipment licenses for Chinese telecoms firms

CAC issues draft measures specifying conditions where security assessment is required for overseas transfer of data

The proliferation of data protection regulations has significant implications for AI service providers, who can expect more stringent rules moving forward

MIIT draft law defines core data for the first time