China: Call for comments on the second draft of the Personal Information Protection Law
Compare with different regulatory event:
Description
Call for comments on the second draft of the Personal Information Protection Law
On 28 April 2021, the Standing Committee of the 13th National People`s Congress issued the second draft of the Personal Information Protection Law for public consultation. Next to general rules for the handling of personal information, the law includes in Art. 40 a data residency obligation. Thus, operators of critical information infrastructure and personal information processors that process personal information up to the number prescribed by the Cyberspace Administration of China shall store collected personal information in the territory of the People's Republic of China. The consultation closes on 28 May 2021.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Data localisation requirement
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament
Complete timeline of this policy change
Hide details
2020-10-21
in consultation
2020-11-19
processing consultation
2021-04-28
in consultation
2021-05-28
processing consultation
2021-08-20
adopted
Key regulatory dimensions
Regulated subjects
The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type
Private organisation
Economic activity
cross-cutting
Category
All
2
Type
Other corporate representative
Economic activity
cross-cutting
Category
All
Policy change by business practice
The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): storage (any form)
Regulatory tool
Risk or other impact assessment requirement
Local storage requirement
Sanctions
Regulated subjects
1