China: Implemented Personal Information Protection Law includes data portability measures

On 1 November 2021, the National People's Congress of the People's Republic of China (NPC) implemented the Personal Information Protection Law (PIPL) through an order by President Xi Jinping. It represents China's first comprehensive law in the area of personal information protection. Besides providing general rules regarding the handling and scope of personal information, the law states in Art. 45 that data subjects have the right to data portability. However, the national cybersecurity department may specify further conditions, which have to be met in order to proceed with the transfer of personal information. Together with the Data Security Law and Cybersecurity Law, the PIPL will regulate cybersecurity and data privacy protection in China.