Law: The Shanghai Data Regulations (only available in Chinese here) ('the Regulations')
Regulator: The Municipal Internet Information Department
Summary: On 29 November 2021, the Standing Committee of the Shanghai Municipal People's Congress adopted the Regulations, which entered into effect on 1 January 2022. The Regulations set out provisions for the processing of personal data, including general provisions on data subject rights and the standardisation of data processing activities. In addition, the Regulations are in accordance with the Personal Information Protection Law of the People's Republic of China ('PIPL') and the Data Security Law of the People's Republic of China ('DSL').