A first national-level personal information protection law for Mainland China has been published, reinforcing, and heightening existing data protection compliance obligations for organizations doing business in China. Compliance obligations previously considered will now become binding law, and new compliance steps – including some registrations with local authorities – must be taken.
