As of November 1st, 2021, the new data protection law, the Personal Information Protection Law (PIPL), came into effect marking a new era in China’s data protection development. The PIPL established a comprehensive legal framework, laying out ground rules for how data is collected, used, and stored in China. The regulation impacts companies operating in the PRC, as well as on those abroad, as it includes data processing requirements and a security assessment conducted by state authorities that these must be strictly complied with.