On November 1, 2021, China’s first comprehensive privacy law—the PIPL (Personal Information Protection Law)—went into effect. Chinese users account for nearly one-fifth of internet users around the world. Even if you have no Chinese customers, any personal info you have on any Chinese user visiting your website falls under the PIPL.
The PIPL draws visible inspiration from multiple privacy laws around the world, especially the GDPR. Several principles outlined in the PIPL include:
For a more in-depth look at China’s privacy law, check out this unofficial English translation of the PIPL here.
Like most privacy laws, the PIPL covers any user who has provided data to a business, whether they’ve made a purchase or not. This means you could be subject to the PIPL even if you don’t strictly have any Chinese customers. Their data is still protected. And you still have to ensure they can read and understand your data policies before consenting.
China’s new data privacy law bears several similarities to the GDPR. However, it’s also different enough that business owners can’t afford to disregard it. And when privacy laws overlap, it can be tricky to remember which portions don’t overlap and what regions of the world these unique requirements cover.
We have a solution: 4Comply! Its user-friendly system allows your privacy team to easily track every legal requirement you have to follow. Businesses newly subject to the PIPL will find this especially useful. Contact us today for a free demo.