PIPL

China's comprehensive privacy law, in effect since November 2021, often compared to the EU's GDPR. It requires consent for processing personal information, imposes strict rules on transferring data out of China, and applies to foreign companies that handle Chinese residents' data. Fines can reach 5 percent of annual revenue, making it a major compliance concern for multinationals.