CHINA

People's Republic of China passed the Personal Information Protection Law (PIPL),中华人民共和国个人信息保护法 which came into force in November 2021. The original draft from October 2020 has already garnered a lot of attention around the world as its external application is more explicit than that of China's Cyber Security Law. Now that PIPL has taken effect, companies that do business in China, regardless of any physical presence in the country, must comply or be subject to fines of up to 50,000,000 CNY (about 6 million EUR) or 5% of annual international turnover, as well as individual fines of up to CNY 1 million for individuals found responsible. Serious violations can even result in suspension or cancellation of business licenses.