China’s Ministry of Public Security (“MPS”) penalized Dior Shanghai for breaching personal information protection obligations, following an investigation into a data breach incident. MPS identified the following violations during the investigation: failure to implement a cross-border transfer mechanism; failure to fully inform data subjects about how their personal information would be handled by an overseas recipient; failure to obtain separate consent for cross-border trans

On April 25, 2025, TC260 issued the recommended standard Data Security Technology – Security Requirements for Handling of Sensitive...

On July 18, 2025, the CAC issued guidance on reporting the appointment of personal information protection officers. Handlers that reached...

The CAC and three additional departments jointly announced plans to strengthen PIPL enforcement in 2025 by applying special measures to...

On May 9, 2024, Tianjin Commission of Commerce released the Tianjin FTZ Negative List (2024 Edition) to facilitate the cross-border data...

On May 23, 2023, China circulated the Information Security Technology－ Implementation Guidelines for Notices and Consent in Personal...