China: Privacy Protection

2022年，一场震惊全球的数据泄露事件将某知名国际网约车公司推上风口浪尖。黑客通过社交工程手段攻破其第三方供应商员工的VPN权限，进而入侵多个内部系统，导致大量员工和司机的姓名、邮箱、位置信息、账户内容等个人数据遭到外泄。事件发生后，美国联邦贸易委员会（FTC）率先发起调查&#

China's Cyberspace Administration and Ministry of Public Security have jointly issued new regulations establishing simplified personal information protection compliance measures specifically for small-scale data processors.

China's National Financial Regulatory Administration has issued comprehensive guidance on artificial intelligence development and application in the banking and insurance sectors, establishing systematic requirements for AI governance, risk management, data protection, and algorithmic transparency. Insurance institutions must now navigate new compliance obligations covering high-risk AI applications in underwriting, claims processing, and risk assessment, while balancing innovation with enhanced consumer pr

The Draft Provision on the Collection and Use of Personal Information on Internet Applications (the "Draft Provision") was released by the Cyberspace Administration...

On December 29, 2025, the Cyberspace Administration of China (CAC, 国家互联网信息办公室) issued the Announcement on the Filing of Compliance Audits of the Protection of Minors...

In September, China concluded an administrative penalty case related to personal information protection, once again underscoring the importance of compliance with cross-border data transfer...

This China Newsletter provides an overview of key developments in the following areas...

China's efforts for transparent and lawful data processing, especially when it comes to cross-border personal information transfers.

随着数据合规监管日趋严格，多方参与的数据处理场景日益增多。