Your shield and sword for China’s data privacy law

On November 1, 2021, China’s data privacy law (Personal Information Protection Law, or PIPL) goes into effect. The law supplements existing privacy rules established by the Data Security Law and Cybersecurity Law. With a focus on personal information protection, the law sets comprehensive rules for companies on how to process personal information of individuals and regulates the lifecycle process of handling personal information, including collection and storage. Phil Bezanson of Bracewell, LLP helps us understand the new law and what corporations ought to do to address the risk and opportunity arising from PIPL.