China

Latest

China

Key Questions Answered for China’s Personal Information Protection Law

June 21, 2022

China's PIPL mirrors the GDPR in terms of many of its core requirements and penalties, but some requirements are nuanced and and may require a refresh review of the existing company policies and procedures, which may create additional operational burdens.

Judge gavel near the China flag showing cybersecurity rules for financial firms

Cyber Security News

Potential Risk for Financial Firms in China’s New Draft Cybersecurity Rules: Mandatory Data Storage, Sharing With CSRC

June 8, 2022

A leading lobbying group in the Asia Pacific region is raising a warning about China's new proposed cyber security rules for financial firms, sending a letter to the China Securities Regulatory Commission.

Decorative stand promoting the Beijing Winter Olympics 2022 in China showing security flaws in mobile app

Cyber Security News

Security Flaws, Censorship Mechanisms Found in Winter Olympics App Provided to Athletes

January 26, 2022

When athletes arrive at the 2022 Winter Olympics they will be required to download an app called MY2022. Meant for contact tracing purposes, it will be packed with some unexpected extras: security flaws and possible censorship features.

Judge's gavel on background of China flag showing national security concerns for offshore listings

Cyber Security News

China’s Campaign Against Offshore Listings Continues With New Regulations for Businesses That Pose a National Security Threat

December 30, 2021

China has announced new requirements for companies that might pose a "national security" threat, chiefly those that have large stockpiles of personal data that might wind up being transferred overseas.

People walking pass China national flag showing DPOs needed for China PIPL

Data Protection Insights

Half a Million DPOs Will Likely Need To Be Appointed in China in 2022: Are Organizations Ready?

December 30, 2021

China’s Personal Information Protection Law (“PIPL”) is now in effect, prompting a surge in hiring for DPOs. What was once a security-oriented role for DPOs in China has been elevated to serve the critical oversight function of ensuring organizational compliance with PIPL.

Cyber Security News

Alibaba Cloud Deal Nixed by Chinese Regulators Over Failure To Report Log4j Vulnerability

December 28, 2021

Alibaba's security team was the first to discover the Log4j vulnerability. Though Alibaba Cloud was not compromised, the company is nevertheless facing consequences for failing to notify Chinese regulators within two days as required by new laws passed in September 2021.

Judge gavel over US and China flags showing data privacy regulations

Data Protection Insights

What the U.S. Can Learn From China’s Data Privacy Regulations

December 7, 2021

Recently, China’s new Personal Information Protection Law (PIPL) went into effect. The question now is what does this mean for the future of data protection policy, and perhaps more importantly, the lack of a comprehensive U.S. policy?

Data Privacy News

China’s New Data Laws Force Tencent to Submit New Apps & Updates for Government Approval

November 29, 2021

One of China's biggest tech companies has been told to pause any rollout of new apps. Tencent is now subject to added scrutiny from the government after multiple instances of running afoul of the country's new data laws.

China flag watched through magnifying glass showing data transfers

Data Protection News

China Proposes New Guidelines on Foreign Data Transfers; Many More Companies Would Face National Security Reviews

November 3, 2021

If the new rules are approved, a broad range of Chinese companies will be subject to screening of data transfers that involve personal information or pertain to critical infrastructure.

Judge gavel on the China flag showing data protection law impacting tech firms

Data Protection News

China’s New Data Protection Law Maintains Full State Access To Private Information, but Puts Clamps on Tech Firms Comparable to EU’s GDPR

August 24, 2021

China’s new GDPR-style data protection law does almost nothing to curb the state's unfettered access to data stored within the country, but does sharply limit the ways in which tech firms can handle and share it.

China

Key Questions Answered for China’s Personal Information Protection Law

Potential Risk for Financial Firms in China’s New Draft Cybersecurity Rules: Mandatory Data Storage, Sharing With CSRC

Security Flaws, Censorship Mechanisms Found in Winter Olympics App Provided to Athletes

China’s Campaign Against Offshore Listings Continues With New Regulations for Businesses That Pose a National Security Threat

Half a Million DPOs Will Likely Need To Be Appointed in China in 2022: Are Organizations Ready?

Alibaba Cloud Deal Nixed by Chinese Regulators Over Failure To Report Log4j Vulnerability

What the U.S. Can Learn From China’s Data Privacy Regulations

China’s New Data Laws Force Tencent to Submit New Apps & Updates for Government Approval

China Proposes New Guidelines on Foreign Data Transfers; Many More Companies Would Face National Security Reviews

China’s New Data Protection Law Maintains Full State Access To Private Information, but Puts Clamps on Tech Firms Comparable to EU’s GDPR

Cybersecurity Incidents From Poor API Security Cost Businesses $75 Billion Annually

International Law Enforcement Partnership Takes Down Russian Botnet; Illicit Proxy Service Had Been Selling Hacked IP Addresses

Can Your Cybersecurity Strategy Stop a Determined Attacker?

67% Of Businesses Suffer Repeat Cyber Attacks Within 12 Months After the First Data Breach