Other Briefings
Personal Information Protection Audits in China – New Draft Standards
The new draft standards provide useful guidance for companies in China to carry out personal information protection compliance audits proposed under draft measures in 2023.
New Data Security Risk Assessment Rules for Industry and Information Technology Sectors
New trial rules clarify data security risk assessments requirements for companies processing core and important data in the industrial and IT fields.
China Releases New Draft Regulations on Generative AI
China is striving to regulate generative AI while promoting innovation and technological advancement. The NISSTC has issued draft regulations outlining security measures for generative AI service providers, underscoring China’s commitment to responsible AI development.
Shanghai Lingang New Area Releases Whitelists for Data Export, Facilitating Cross-Border Data Flows
Shanghai’s Lingang New Area has released general data lists that will facilitate data export for companies in the automotive, biopharma, and mutual fund sectors.
Tianjin Free Trade Zone Releases China’s First Negative List for Cross-Border Data Transfer
The Tianjin Free Trade Zone has released China’s first data Negative List outlining the types of data that must undergo a security review by China’s cybersecurity bureau to be transferred out of China.
China to Relax Foreign Ownership Limits in Value-Added Telecommunication Services
China has launched a pilot program in specific regions to relax foreign ownership restrictions on certain value-added telecommunication services. The program aims to attract foreign investment and boost market activity.
China’s Draft Certification Standards for Cross-Border Personal Information Transfer (Updated)
China’s standards committee has begun soliciting feedback on standards for third-party agencies to certify companies for personal information export.
Cross-Border Data Transfer – New Measures Clarify Security Review Requirements
China has released long-awaited measures detailing requirements for security assessments for transferring data out of the country.
