China: Consultation on second draft data security law focussing on data protection including clarifications on scope

The National People's Congress Standing Committee publishes its second draft of the Data Security Law for consultation, which contains several amendments. It states that the catalogue of "important data" is to be formulated by the State in a unified approach, emphasises the need for multi-level protection schemes, enhances the penalties for violating data security obligations and establishes a separate framework for the cross-border transfer of important data.