Who is covered
Handlers processing personal information of individuals in China, with extraterritorial hooks.
China Law Key Words · Practice parent
PIPL (Personal Information Protection Law)
Keyword hub for PIPL—China’s personal information protection law—linked to deep guides and the national data privacy L3.
Last reviewed 21 August 2026
The rule in 60 seconds
Start with the rule, then map it to your situation
This briefing separates the core issue from the next research and counsel steps.
Individual rights
Access, correction, deletion, and portability-style requests in practice.
Key distinction: This is general orientation. Company type, documents, location and timing can change the analysis.
Which situation are you in?
Start with the event, then test the rule
Scenario 01
Who is covered
Handlers processing personal information of individuals in China, with extraterritorial hooks.
Next review: Open the related guides and confirm how this issue presents in your documents.
Scenario 02
Individual rights
Access, correction, deletion, and portability-style requests in practice.
Next review: Open the related guides and confirm how this issue presents in your documents.
Scenario 03
Outbound PI
PIPL Chapter III transfer rules and CBDT measures.
Next review: Open the related guides and confirm how this issue presents in your documents.
Scenario 04
HR data
Employee PI, monitoring, and global HRIS design issues.
Next review: Open the related guides and confirm how this issue presents in your documents.
Key steps
A simple sequence for this topic
01
Map personal information
Employees, customers, users, vendors.
02
Update notices
Chinese-language notices and purposes.
03
Check sensitive PI
Separate consent and heightened security.
04
Review processors
Contracts and diligence for cloud and HR tools.
Review checklist
What to check before you choose the next step
Map personal information
Employees, customers, users, vendors.
Update notices
Chinese-language notices and purposes.
Check sensitive PI
Separate consent and heightened security.
Review processors
Contracts and diligence for cloud and HR tools.
Plan transfers
SCC, assessment, or local processing.
Why this matters
The issue usually reaches beyond a single filing
Who is covered
Handlers processing personal information of individuals in China, with extraterritorial hooks.
Individual rights
Access, correction, deletion, and portability-style requests in practice.
Outbound PI
PIPL Chapter III transfer rules and CBDT measures.
HR data
Employee PI, monitoring, and global HRIS design issues.
Recommended reading path
Move from the rule to the right depth of guidance
Common situations
Recognise the issue before you choose the response
Who is covered
Handlers processing personal information of individuals in China, with extraterritorial hooks.
Individual rights
Access, correction, deletion, and portability-style requests in practice.
Outbound PI
PIPL Chapter III transfer rules and CBDT measures.
Frequently asked questions
Questions readers commonly need answered next
Is PIPL the same as GDPR?
No—similar themes, different transfer and localisation design. See PIPL vs GDPR.
Parent hub?
Data privacy & cybersecurity keyword hub.
Guides & articles
Practical writing from counsel and the portal editorial team on this topic
When the next step needs advice
Turn the legal issue into an actionable company plan.
Use the directory to find relevant counsel or ask a focused question through China Legal Portal.