China: NPC passes PIPL
The National People's Congress of the People's Republic of China ('NPC') announced, on 20 August 2021, that the Personal Information Protection Law of the People's Republic of China ('PIPL') was adopted by the 30th meeting of the Standing Committee of the 13th NPC. In particular, the PIPL provides, among other things, rules for the processing of personal and sensitive information including legal basis and disclosure requirements. In addition, the PIPL introduces rules for personal information protection processors, as well as data subject rights, and outlines requirements regarding data transfers to third parties. Furthermore, the PIPL contains penalties for breach of its provisions including a percentage of the annual turnover on the responsible department where personal information is handled in violation of the provisions.
The PIPL will enter into effect on 1 November 2021.