A Brief Note on China's Personal Information Protection Law

Abstract

The Personal Information Protection Law (PIPL), China's new data privacy law, entered into force on November 1. Noncompliance has severe penalties, including fines of up to $7 million or 5% of a corporation's annual income, the loss of business licenses, and even leading to shutting down of a company.

This newly enacted law has joined other data protection laws recently established by nations or regions, such as the EU's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Other countries, like Brazil and India, are enacting data privacy rules.