Law: The Shanghai Data Regulations (only available in Chinese here) ('the Regulations')

Regulator: The Municipal Internet Information Department

Summary: On 29 November 2021, the Standing Committee of the Shanghai Municipal People's Congress adopted the Regulations, which entered into effect on 1 January 2022. The Regulations set out provisions for the processing of personal data, including general provisions on data subject rights and the standardisation of data processing activities. In addition, the Regulations are in accordance with the Personal Information Protection Law of the People's Republic of China ('PIPL') and the Data Security Law of the People's Republic of China ('DSL').