On 30 Sept., the State Council of China released the Regulations on Network Data Security Management, following three years of discussions involving various stakeholders since the initial consultation draft was made public in 2021. The final version of the regulations will take effect 1 Jan. 2025.
The Data Security Regulations are a crucial set of national-level administrative rules to implement China's Cybersecurity Law, Data Security Law and Personal Information Protection Law. Compared to the 2021 draft, the final version provides much-needed clarity on certain pressing issues raised by businesses and introduces some relaxations to ease compliance costs and burdens. Key provisions of the regulations will have significant implications for multinational corporations operating in China.
To read the full article, please visit IAPP.org