PIPL, CSL, DSL, and cross-border data

Data Privacy Law & Cybersecurity

China’s privacy and cybersecurity regime is strict and enforcement-active. We introduce China counsel for PIPL compliance, data export assessments, and security incidents.

Matters we coordinate

Personal Information Protection Law (PIPL), Cybersecurity Law, Data Security Law, cross-border data transfer assessments, privacy notices, and incident response — coordinated with China privacy counsel.

PIPL compliance

Lawful bases, notices, separate consent, and processor agreements for China personal information.

Cybersecurity & data security

Cybersecurity Law and Data Security Law obligations for network operators and important data.

Cross-border transfers

Security assessments, standard contracts, and certification routes for exporting data from China.

Incidents & governance

Breach notification, regulator engagement, and ongoing privacy programme counselling.

How we work with you

A clear liaison process — China counsel handles the legal work; we keep you informed in English.

01

Data map

What personal and important data you collect, store, and export.

02

Gap analysis

PIPL/CSL/DSL exposure with China privacy counsel.

03

Remediate

Notices, contracts, transfer mechanisms, and policies.

04

Respond & improve

Incident playbooks and periodic refresh.

Frequently Asked Questions

Does PIPL apply if we only have UK customers?
PIPL can apply when processing personal information of individuals in China, or in other extraterritorial scenarios. China counsel will assess your facts.

Need China privacy or cybersecurity advice?

Get a free consultation with our UK liaison. We'll assess your requirements and connect you with China counsel for a clear proposal.

Book a Free Consultation