DLA Piper writes:
Important updates to China’s de facto data privacy regulations will come into force on 1 October 2020. The amendments to the Personal Information Security Specification (“PIS Specification”) comprise important clarifications rather than substantial changes to the existing regulations. This additional guidance on the practical steps needed to comply with China’s data privacy framework is good news for organisations operating in China. Helpfully the final version also more closely aligns with other recent laws (such as the PRC E-Commerce Law and the PRC Encryption Law), and does not change significantly from earlier drafts.
Read the important points to note on Privacy Matters, including their note on what is not clarified or included in the updates.