China’s Personal Information Protection Law (1)

按语：《个人信息保护法（草案）》于2020年10月13日经第十三届全国人大常委会第二十二次会议进行了初次审议。作为首部专门规定个人信息保护的法律，它的正式颁布实施无疑会对在中国从事经营活动的企业产生重大影响。草案颁布后出现了大量的中文解读，我们选择用英文文章帮助在中国企业的外国同事进一步了解相关问题。如有任何问题，请随时与我们联系。陈立彤律师的电子邮箱：[e-mail]。

China’s Personal Information Protection Law (1)

Henry Chen

Since October 21, 2020, China’s legislature has officially begun its public consultation process on the draft of Personal Information Protection Law.  With its passage in near future, it will function jointly with Cyber Security Law and Data Security Law (with its draft under legislative review) to regulate China’s online spheres in relation to cybersecurity and data governance and deal with the thorny issues present in personal data protection and uncertainties brought by new information technology and applications.  Hereinafter are some salient features of the draft law:

Extraterritorial jurisdiction

The draft law stipulated the application of extraterritorial jurisdiction (Article 3) which indicates,  as hailed by some commenters, that China begins to use long-arm jurisdiction to regulate the concerned entities across the border.  There are three situations that will trigger the application of extraterritorial jurisdiction in relation to the processing of personal data outside China’s realm: 

-- The processing is done with the aim of providing goods and services to the natural persons within the realm of China; 

-- The process  is to analyze or evaluate the behaviors of the natural persons within the realm of China; 

-- Some other situations as prescribed for by other laws and regulation.

 ......

<Enter the QR code below to read the complete article>

<点击下列二维码阅读全文>或

<点击左下方“阅读原文”获取全文链接>