Last week, Beijing issued a draft provision for cross-border data flows, potentially lowering the compliance cost for companies and waiving regulatory requirements for some data exports. The draft, however, is awaiting finalization, which could bring more changes.

As part of a wrongful dismissal suit filed in May, Yintao Yu, the former head of engineering for ByteDance’s U.S. operations, alleged that the Chinese Communist Party (CCP) has "supreme access" to all the company's data, including data stored in the U.S.

To implement Measures that will become effective tomorrow, China's cyber watchdog issued a Guideline on the procedure for using the standard contracts to export personal data.

Recently, the Chinese government issued several drafts of mandatory national standards for automobiles, including on cyber security and management systems, as well as on data recording systems. One of the drafts touches on vehicle designs and settings that would allow cross-border data transfer.

China's internet watchdog, the Cyberspace Administration of China (CAC), recently issued the rules on standard contracts used for personal data exports. Companies will have until December 1, 2023 to bring their existing practice into full compliance. A template of a standard contract is attached to the rules, with

Samm Sacks, a Senior Fellow at Yale Law School’s Paul Tsai China Center and cyber policy fellow at New America, a think tank based in Washington, DC, recently made some remarks on the key pieces of Chinese legislation on cyber and data, as well as the current status of

In a recent case before the U.S. District Court, Southern District of New York, Magistrate Judge Barbara Moses dismissed the defendants' argument that legal obligations under China's Personal Information Protection Law (PIPL) prevent them from providing personal information relevant to the case, as she found "