China’s Personal Information Protection Law (PIPL)
Scope:
As with the GDPR, the PIPL affects websites and companies outside of China. Therefore, as long as your website collects or deals with information of people residing in China, you need to comply with the PIPL.
Rights provided:
- The right to know what businesses will be doing with their personal information
- The right to make decisions about their personal information
- The right to prohibit or restrict businesses from processing their personal information
- The right to copy and consult their personal information from processors
- The right to delete and correct their personal information
- The right to portability of their personal information
- The right to ask you to explain the processing rules
Related PIPL compliance requires:
- Update your privacy policy, terms and conditions, cookie notifications, and all contracts, so they align with PIPL. If you didn’t obtain explicit, voluntary consent before, you need to notify these individuals and ask them to provide explicit, voluntary consent every time you handle their personal information.
Reference:
