

The DOJ Sensitive Data Rule: A Race to Compliance Maturity
On October 6, 2025, the final provisions of the DOJ Sensitive Data Rule took effect, completing the framework for the DOJ’s Data Security Program. Institutions engaging in relevant data-sharing activities should move quickly to ensure compliance. On October 6, 2025, the last provisions of 28 C.F.R. Part 202, “ Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons ” (“DOJ Rule”) took effect, completing the regulatory

Alan Grose, XL Law Consulting
Dec 26 min read


China Issues New Requirements for Handling of Sensitive Personal Information
On April 25, 2025, TC260 issued the recommended standard Data Security Technology – Security Requirements for Handling of Sensitive...

Rose Li, XL Law & Consulting
Aug 65 min read


China Releases Guidelines on Reporting the Appointment of Data Protection Officers
On July 18, 2025, the CAC issued guidance on reporting the appointment of personal information protection officers. Handlers that reached...

Rose Li, XL Law & Consulting
Jul 314 min read


China Releases Draft Amendment to Cybersecurity Law
On March 28, 2025, the Cyberspace Administration of China released a draft amendment to the Cybersecurity Law(“Draft Amendment”) for...

Rose Li, XL Law & Consulting
Jun 44 min read


Education Highlights from China’s 2025 Two Sessions
The 2025 Government Work Report emphasizes integration of vocational education and general (i.e., non-vocational) education, further...

Rose Li, XL Law & Consulting
May 263 min read


China Announces Special Measures to Strengthen PIPL Enforcement in 2025
The CAC and three additional departments jointly announced plans to strengthen PIPL enforcement in 2025 by applying special measures to...

Rose Li, XL Law & Consulting
May 124 min read


New Executive Order Signals Heightened Section 117 Enforcement Priority
On April 23, 2025, President Trump issued an Executive Order directing the Secretary of Education to step up enforcement of Section 117...

Alan Grose, XL Law Consulting
May 52 min read


DOJ Publishes Guidance, Announces Additional 90-Days for Good Faith Efforts to Comply with Sensitive Data Rule
On April 11, 2025, the DOJ National Security Division published new guidance regarding the U.S. Sensitive Personal Data and...
Alan Grose and Emma Bahner, XL Law Consulting
Apr 295 min read


China Releases Final Measures for Compliance Audits on Personal Information Protection
Recently, the CAC released the final Measures for the Administration of Compliance Audits on Personal Information Protection...

Rose Li, XL Law & Consulting
Apr 74 min read


China Issues 2025 Action Plan for Attracting Foreign Investment
On February 19, 2025, China issued the 2025 Action Plan for Stabilizing Foreign Investment, outlining key measures to attract and retain...

Rose Li, XL Law & Consulting
Mar 242 min read


DOJ Issues National Security Regulation to Limit Transfers of Sensitive Data to Countries of Concern
On January 8, 2025, the DOJ issued a new final rule to prohibit or restrict transfers of bulk sensitive personal data and certain U.S....
Alan Grose and Emma Bahner, XL Law Consulting
Mar 1311 min read


For the First Time, China Approves Foreign Investment in Vocational Education in Beijing
The Approval for the Temporary Adjustment of the Implementation in Beijing of the Provisions of Relevant Administrative Regulations and...

Rose Li, XL Law & Consulting
Mar 103 min read


EU-China Cross-Border Data Flow Communication Mechanism
On August 27, the European Union and China launched a new Cross-Border Data Flow Communication Mechanism to address problems regarding...

Alan Grose, XL Law Consulting
Jan 243 min read


First Cross-Border Data Transfer Decision in China
On August 9, 2024, the Guangzhou Internet Court published an opinion in the first cross-border data transfer case in China. The case ...

Rose Li, XL Law & Consulting
Jan 244 min read


China Releases Final Regulation on Network Data Security Management
On September 24, China’s State Council released finalized Regulations on Network Data Security Management, which took effect on January...
Alan Grose and Rose Li, XL Law Consulting
Jan 245 min read


China’s First Guide to the Use of AI in Education
The Beijing Education Commission released the Beijing Guide to AI Application in Education (2024) on October 28, 2024, which encourages...

Rose Li, XL Law & Consulting
Jan 142 min read


Open Doors Report Shows Continued Increases in International Student Enrollment in the U.S. and U.S. Students Studying Abroad
International student enrollment at U.S. institutions during the 2023/24 academic year increased 7% from the previous academic year,...

Anne Wilder, XL Law & Consulting
Jan 103 min read


China’s Degree Law Coming into Force
China’s Degree Law will take effect on January 1, 2025. The Degree Law divides degrees into academic and professional degrees, sets out...

Rose Li, XL Law & Consulting
Dec 13, 20242 min read


China Lifts Some Foreign Investment Restrictions, Bringing It One Step Closer to the Opening-Up to the Outside World
The PRC’s Special Administrative Measures (Negative List) for the Access of Foreign Investment, which take effect November 1, removes all...

Rose Li, XL Law & Consulting
Oct 30, 20242 min read


China Further Strengthens Protection of Consumers’ Personal Information
On March 19, 2024, China issued the Regulation on the Implementation of the Law of the PRC on the Protection of Consumer Rights and...

Rose Li, XL Law & Consulting
May 7, 20243 min read

