{"id":8168,"date":"2021-11-03T09:56:43","date_gmt":"2021-11-02T20:56:43","guid":{"rendered":"https:\/\/kinetics.co.nz\/?p=8168"},"modified":"2021-11-03T09:56:43","modified_gmt":"2021-11-02T20:56:43","slug":"does-the-new-chinese-pipl-law-apply-to-you","status":"publish","type":"post","link":"https:\/\/new.kinetics.co.nz\/?p=8168","title":{"rendered":"Does the new Chinese PIPL law apply to you?"},"content":{"rendered":"\n\n[et_pb_section fb_built=”1″ _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_row _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}”]

If you do business in China, you need to know about the \u201cPIPL\u201d<\/h2>\n

It\u2019s the Chinese equivalent of the GDPR from the EU \u2013 and your responsibility to protect the data privacy of the Chinese.<\/p>\n

The law came into being relatively quickly and has already taken effect as at November 1st 2021. However, as this stage it appears to be mainly a framework and there will be further regulations emerging across specific sectors that relate back to these requirements.<\/p>\n

If you are already working in Europe and complying with the GDPR, then you probably just need to apply those regimes to data that relates to Chinese citizens as well. (\u201call information related to identified or identifiable natural persons\u201d)<\/p>\n

We\u2019ve taken the following table from an excellent analysis at the International Association of Privacy Professionals (IAPP) <\/a><\/p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}” column_structure=”3_5,2_5″][et_pb_column type=”3_5″ _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}”]\n\n\n\n\n\n\n\n\n\n\n\n
Rights under the GDPR<\/strong><\/td>\nRights under the PIPL<\/strong><\/td>\n<\/tr>\n
Right to information<\/td>\n\u221a<\/strong><\/td>\n<\/tr>\n
Right to access<\/td>\n\u221a<\/strong><\/td>\n<\/tr>\n
Right to correction\/rectification<\/td>\n\u221a<\/strong><\/td>\n<\/tr>\n
Right to erasure<\/td>\n\u221a<\/strong><\/td>\n<\/tr>\n
Right to object to and restrict the processing of an individual\u2019s data<\/td>\n\u221a<\/strong><\/td>\n<\/tr>\n
Right to data portability<\/td>\n\u221a\u00a0<\/strong>(but needs to satisfy conditions stipulated by the Cyberspace Administration of China)<\/td>\n<\/tr>\n
Right not to be subject to automated decision-making<\/td>\n\u221a<\/strong><\/td>\n<\/tr>\n
Right to withdraw consent<\/td>\n\u221a<\/strong><\/td>\n<\/tr>\n
Right to lodge a complaint with the regulator<\/td>\n\u221a<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>[\/et_pb_text][\/et_pb_column][et_pb_column type=”2_5″ _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”http:\/\/kinetics.co.nz\/wp-content\/uploads\/2021\/11\/PIPL.jpg” _builder_version=”4.11.1″ _module_preset=”default” title_text=”PIPL” hover_enabled=”0″ sticky_enabled=”0″][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.11.1″ _module_preset=”default” global_colors_info=”{}”]

As with other data privacy regimes, it is important to consider the information you hold, and the obligations on it.<\/h4>\n

Do you know :<\/p>\n