With a short deadline for compliance – November 1, 2021 – the Chinese Personal Information Protection Law (PIPL) is now a top priority for companies.
The latest privacy law to impact organizations globally
PIPL is China’s first omnibus data protection law that will impact any company with data in China or who does business there.
With the possibility of severe sanctions for non-compliance, organizations must act quickly to comply with the requirements before the deadline.
While aligned to GDPR, PIPL does have distinctions that require readiness analysis, including the lawful basis of HR management and expanded enforcement.
Additionally, persons in charge or directly responsible for the processing operation can receive a personal fine between 10,000 and 100,000 Yuan. The individual sanction would go up to 100,000 and 1 million Yuan and could include a prohibition of holding several professional positions for a certain period.