Last November the Personal Information Protection Law of the People’s Republic of China went into force. The main purpose of PIPL is to establish additional rules and to clarify existing rules for processing personal information. It also defines the obligations of so-called personal information processors” and the rights of personal information subjects”. In addition, the PIPL expands specific data localization requirements, defines measures that the enforcement authority may take to protect personal information, and stipulates fines for violations of the law. How does the PIPL affect Swiss companies, and what are the next steps for Swiss companies who do business in China?