Multi-national business operators should pay more attention to the following provisions
Multinational companies (MNCs) who are suppliers (e.g., IT service providers, software licensors, IDCs) of Target Companies should pay attention to these regulations
The Measures focus on the security of the “important data” and “core data,” which are concepts raised in the PRC Data Security Law (implemented in 2021).
PIPL has quite a few China specific features. As such, for businesses in China who are already GDPR and PIPL compliant, additional efforts may need to be considered and made.
The PRC Supreme People’s Court (SPC) released a judicial interpretation, Provisions on the Application of Law on Trials Over Infringement of the Right of Plant Varieties