Back to Module
4 of 5|Global Privacy Laws
reading 20 min•International Frameworks
China PIPL
China's strict approach to data protection.
🎯 Learning Objectives
- ▸ Understand the scope of PIPL
- ▸ Analyze the data localisation requirements
Strict Requirements
PIPL is one of the strictest laws globally. It requires data localisation for "important data" and mandates security assessments for cross-border transfers.
While the DPDPA allows cross-border transfers by default, PIPL requires a security assessment by the Cyberspace Administration of China (CAC) for most transfers.
📖 Glossary
- PIPL
- Personal Information Protection Law, China's comprehensive data privacy law.
- Important Data
- Data that, if tampered with or leaked, may directly affect national security, economic security, or public health.
🔑 Key Takeaways
- PIPL requires explicit consent for processing sensitive data.
- It has strict data localisation rules.
- Penalties can be up to 5% of previous year's turnover.
📚 Further Reading
- China PIPL — NPC (2021)
Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...