Skip to content

Discover PIPL Personal Information Protection Law

PIPL is China's data protection law that regulates the processing of personal information, requiring consent, transparency, security measures, and granting individuals rights over their data, with penalties for non-compliance.

Understanding PIPL Personal Information Protection Law

PIPL, or the Personal Information Protection Law, is a comprehensive data protection law in China that aims to regulate the processing of personal information. It covers the collection, storage, use, processing, transfer, and disclosure of personal information by both government agencies and private organizations. PIPL requires organizations to obtain consent from individuals before collecting their personal information and to provide clear and easily accessible privacy policies. It also imposes obligations on organizations to protect personal information through security measures and grants individuals rights to access, correct, and delete their personal information. Similar to other data protection laws, PIPL includes penalties for non-compliance, such as fines and suspension of business operations.

Exterro's Solutions

The first draft of the PIPL was submitted to the National People’s Congress of the People’s Republic of China (PRC) for review on 13 October 2020. There has been no official statement about when the law will come into effect. Industry figures suggest it could be as early as the start of 2022.

Resources for Law Firms

Utilize our free resources below to see how Exterro can help you become compliant in many of the global regulations.

American Express Logo

"This is the tool that you need to use…When I took over the function of legal hold person, it was daunting to think of all the processes and things I would have to learn. It was hard for me to wrap my head around at the time. Having Exterro made it so much easier."

Judith Devieux Manager of Legal Affairs, American Express