On November 1, 2021, China’s new comprehensive privacy law, the Personal Information Protection Law went into effect. Officially adopted on August 20, 2021, by the National People’s Congress of China, the PIPL is a key pillar of an emerging framework of privacy regulation in the People’s Republic of China, which already includes the Data Security Law (official English translation) and the Cybersecurity Law (Chinese (Simplified)). For Canadian companies and other organizations that do business in China or with residents of China, the PIPL promises to have potentially significant implications for global data protection and information management practices for years to come. What are its key rights and consent requirements?
