China

Latest

China

Half a Million DPOs Will Likely Need To Be Appointed in China in 2022: Are Organizations Ready?

December 30, 2021

China’s Personal Information Protection Law (“PIPL”) is now in effect, prompting a surge in hiring for DPOs. What was once a security-oriented role for DPOs in China has been elevated to serve the critical oversight function of ensuring organizational compliance with PIPL.

Cyber Security News

Alibaba Cloud Deal Nixed by Chinese Regulators Over Failure To Report Log4j Vulnerability

December 28, 2021

Alibaba's security team was the first to discover the Log4j vulnerability. Though Alibaba Cloud was not compromised, the company is nevertheless facing consequences for failing to notify Chinese regulators within two days as required by new laws passed in September 2021.

Judge gavel over US and China flags showing data privacy regulations

Data Protection Insights

What the U.S. Can Learn From China’s Data Privacy Regulations

December 7, 2021

Recently, China’s new Personal Information Protection Law (PIPL) went into effect. The question now is what does this mean for the future of data protection policy, and perhaps more importantly, the lack of a comprehensive U.S. policy?

Data Privacy News

China’s New Data Laws Force Tencent to Submit New Apps & Updates for Government Approval

November 29, 2021

One of China's biggest tech companies has been told to pause any rollout of new apps. Tencent is now subject to added scrutiny from the government after multiple instances of running afoul of the country's new data laws.

China flag watched through magnifying glass showing data transfers

Data Protection News

China Proposes New Guidelines on Foreign Data Transfers; Many More Companies Would Face National Security Reviews

November 3, 2021

If the new rules are approved, a broad range of Chinese companies will be subject to screening of data transfers that involve personal information or pertain to critical infrastructure.

Judge gavel on the China flag showing data protection law impacting tech firms

Data Protection News

China’s New Data Protection Law Maintains Full State Access To Private Information, but Puts Clamps on Tech Firms Comparable to EU’s GDPR

August 24, 2021

China’s new GDPR-style data protection law does almost nothing to curb the state's unfettered access to data stored within the country, but does sharply limit the ways in which tech firms can handle and share it.

Tesla flagship store in Chengdu China showing smart car data protection regulation

Data Privacy News

China’s Data Protection Regulation Push Comes to the Smart Car Market; Vehicle Keys, Locally Generated Information Must Be Stored In-Country

August 20, 2021

Expansion of China's data protection regulations will impact the smart car market in the country. The CCP has clarified terms to require this of the digital keys to smart vehicles and the data they generate.

Data Protection News

Tencent Suspends New User Registrations for WeChat, Citing Security Upgrade to Comply With New Chinese Laws

July 30, 2021

WeChat has suspended new user registrations until at least "early August" as it rolls out a security upgrade, assumed to be prompted by recent Chinese laws regarding the storage and transmission of the personal data of the country's citizens.

Black keyboard with Chinese flag on enter key showing vulnerability disclosure of zero-days by security researchers

Cyber Security News

Is China Looking to Stockpile Zero-Days? New Vulnerability Disclosure Rules Could Create Closed Pipeline From Security Researchers to CCP

July 21, 2021

New vulnerability disclosure rules announced by the Chinese government have raised the prospect of "zero-day hoarding," as anything discovered in the country must now be reported to the CCP and to no one else (in most cases).

Tiananmen Square in China showing Chinese data laws

Data Protection Insights

Chinese Data Laws and Ambitions Pose Strategic Risks

July 19, 2021

China's new data laws formalizes a legal architecture for Chinese government control over domestic data; a basis for the CCP to claim – and claim oversight over – information, including that of private companies.

China

Half a Million DPOs Will Likely Need To Be Appointed in China in 2022: Are Organizations Ready?

Alibaba Cloud Deal Nixed by Chinese Regulators Over Failure To Report Log4j Vulnerability

What the U.S. Can Learn From China’s Data Privacy Regulations

China’s New Data Laws Force Tencent to Submit New Apps & Updates for Government Approval

China Proposes New Guidelines on Foreign Data Transfers; Many More Companies Would Face National Security Reviews

China’s New Data Protection Law Maintains Full State Access To Private Information, but Puts Clamps on Tech Firms Comparable to EU’s GDPR

China’s Data Protection Regulation Push Comes to the Smart Car Market; Vehicle Keys, Locally Generated Information Must Be Stored In-Country

Tencent Suspends New User Registrations for WeChat, Citing Security Upgrade to Comply With New Chinese Laws

Is China Looking to Stockpile Zero-Days? New Vulnerability Disclosure Rules Could Create Closed Pipeline From Security Researchers to CCP

Chinese Data Laws and Ambitions Pose Strategic Risks

Nearly 500 Million WhatsApp Records Allegedly Stolen in Data Leak, Offered on Dark Web for a Few Thousand Dollars

Killnet DDoS Group Executes a Cyber Attack on the EU Parliament Website After Resolution Against Russia

The Rocky Road to Digital Transformation

How CPOs Can Prepare for CPRA Rules and Enforcement