The Shanghai municipal branch of the Cyberspace Administration of China (“CAC”) has fined the online travel agency Ctrip RMB 10 million, citing failure to fulfill cross-border data security assessment obligations and illegal outbound transfer of personal information. This action marks a new escalation in China's enforcement of its data protection laws, including one of the most substantial fines imposed under the PIPL to date. On June 13, 2026, the Shanghai municipal branch of the...

On August 1, 2025, the PRC Supreme People’s Court issued the Interpretation II on Issues Concerning the Application of Law in the Trial of Labor Dispute Cases, which establishes uniform legal standards in several employment situations that have raised questions in recent years, including the employment relationship in affiliation arrangements, foreign employees, double wages, and two consecutive fixed-term contracts. U.S. institutions with an RO or WFOE in the PRC should review and update...

On September 11, 2025, the Cyberspace Administration of China released the Measures for Cybersecurity Incident Reporting, which clarify the specific requirements for network operators regarding cybersecurity incident reporting. The Measures require network operators to report certain incidents within one to four hours, depending on the type of entity involved. On September 11, 2025, the Cyberspace Administration of China (“ CAC ”) released the Measures for Cybersecurity Incident Reporting ...