In August, China's Ministry of Industry and Information Technology (MIIT) listed 267 apps in three batches, including WeChat and several major online streaming apps, that were found to have violated user rights, and have not resolved these problems within the period of time they were given to do

On August 20, China’s Standing Committee of National People’s Congress passed the nation’s first Personal Information Protection Law (个人信息保护法) (PIPL) (informal English version here). It is modeled after the Europe Union's General Data Protection Regulation, and has been called by some western media “one of

On June 29, the Standing Committee of Shenzhen Municipal People’s Congress passed the Data Regulations of Shenzhen Special Economic Zone (hereafter referred to as “the Data Regulations”) (深圳经济特区数据条例 [http://www.sznews.com/content/mb/2021-07/07/content_24370464.htm?cxid=iyt&token=1625616000115] , link in Chinese). The rules

On July 18, China's Ministry of Industry and Information Technology (MIIT) issued its 6th list [https://www.miit.gov.cn/jgsj/xgj/gzdt/art/2021/art_d902f99e88ea42bab468d674bac622e1.html] in 2021 of apps that have not resolved existing problems related to user rights infringement. The list consists of 145

On July 11, the Cyberspace Administration of China (CAC) issued a draft of the revised version (the Draft) of the Measures on Cybersecurity Review (网络安全审查办法（修订草案征求意见稿）). The revision, once finalized, would serve as the legal basis for the cybersecurity reviews launched recently. The Draft solicits comments, which are due by

China has taken a series of actions recently in an effort to tighten scrutiny of the data security practices of domestic technology companies. Most prominently, the Cybersecurity Review Office (CRO) and Cyberspace Administration of China (CAC) initiated multiple cybersecurity reviews, including one on Chinese ride-hailing company Didi. These investigations all

On June 10, China’s Standing Committee of the National People’s Congress passed China’s first Data Security Law (数据安全法). The Data Security Law (the Law) was heavily influenced by the United States’ Clarifying Lawful Overseas Use of Data Act (the CLOUD Act) and the European Union’s General