Data Privacy and Cybersecurity

04 Sep 2026

Cross-Border Employee and R&D Data from a Suzhou Factory After the 2024 CAC Rules: When Is a Transfer Exempt and When Does PIPL Still Require a Compliance Route?

A foreign-invested manufacturer in Suzhou uses global HR, quality and engineering platforms hosted overseas. Employee data goes to regional headquarters. Production data goes to a…

10 Aug 2026

China Eases Compliance for Small-Scale Personal Information Processors: A Pragmatic Guide for International Businesses

For years, multinational companies operating in China have grappled with the comprehensive and often onerous requirements of the Personal Information Protection Law (PIPL). The st…

10 Aug 2026

Operationalizing EU Data and Cybersecurity Compliance for Chinese Tech and Industrial Investors: From the EU Data Act to Connected Device Governance

Executive Summary As Chinese investments in the European Union pivot toward high-tech sectors — smart connected vehicles, industrial automation, medical devices, and artificial in…

10 Aug 2026

Navigating EU Data Protection and Privacy in Outbound M&A and Investment: A Strategic Compliance Guide for Chinese Investors

Executive Summary For Chinese enterprises pursuing outbound mergers and acquisitions (M&A), private equity investments, or joint ventures in the European Union, data protection an…

09 Aug 2026

China Data Compliance Decision Guide 2026: PIPL, Transfers & Cybersecurity

China data compliance is not one filing. A foreign business must map the activity, classify the data, test important-data and critical-infrastructure status, calculate calendar-ye…

Important Data (China DSL) Data Localization in China

07 Aug 2026

MNC China Data Compliance: HR, CRM & HQ Systems Hub

General information only. PIPL, data-export security assessment, standard contract, and certification paths depend on volume, sensitivity, industry, and CAC/local practice. This i…

Data Localization in China

07 Aug 2026

China PIPL Compliance Checklist for US Companies

General information only. PIPL, data-export security assessment, standard contract, and certification paths depend on volume, sensitivity, industry, and CAC/local practice. This i…

02 Aug 2026

China Data Privacy Regulatory Tracker

Legally reviewed by: Tongyu Yan, Cross-Border Data Transfer Counsel, for PIPL, data export and cybersecurity compliance scope. Last legally reviewed: 7 August 2026. A living refer…

MLPS & Cybersecurity Law Compliance

02 Aug 2026

China Cross-Border Data Transfer Roadmap (2026)

Not legal advice. CAC pathways and volume triggers are versioned. This page is the project roadmap — not a headcount table and not the HR-only spoke.If a person outside China can…

Important Data (China DSL) Data Localization in China

02 Aug 2026

PIPL for International Businesses: A Practical Guide

Legally reviewed by: Tongyu Yan, Cross-Border Data Transfer Counsel, for PIPL, data export and cybersecurity compliance scope. Last legally reviewed: 7 August 2026. China’s Person…

30 Jul 2026

China PIPL: Personal Information Protection Law

The Personal Information Protection Law (PIPL) is Mainland China’s core statute on personal information. It sits beside the Cybersecurity Law and Data Security Law. This page is t…

30 Jul 2026

China Cybersecurity Law and Multi-Level Protection

Direct answerCSL is the network-security statute; MLPS is the grading machine underneath it. CSL applies to the construction, operation, maintenance and use of networks in the PRC…

Important Data (China DSL) MLPS & Cybersecurity Law Compliance