What Will I Learn?
About Chinese personal information protection
The meaning of key PIPL privacy terms
Lawful Chinese personal information processing conditions
The rights the PIPL grants to individuals in China
About Chinese authorities’ approach to data governance, security & data breaches
Cross-border personal information transfer requirements
Key similarities and differences between the PIPL and the EU’s GDPR
Requirements
Description
China’s Personal Information Protection Law (PIPL) affects organisations processing the personal information of people located within mainland China.
PIPL headlines focus on fines – up to 5% of turnover.
The Chinese legal system and personal information protection regime is multi-layered and complex.
That’s what PIPL 101 demystifies.
It explains the PIPL’s context and provides an overview. It outlines key Chinese data protection terminology. It presents personal information lawful processing conditions.
The rights granted to individuals are given. Data governance, security and data breach notification obligations are outlined. Cross-border data transfer requirements are explained.
Similarities and differences between China’s PIPL and the EU’s GDPR are considered.
PIPL 101 is an introductory Chinese personal information protection awareness course.
Course content and overview
Covers eight personal information protection topics
Context & characteristics
Terminology & roles
Lawful processing & notices
Individuals’ rights
Data governance, security & data breaches
Cross-border data transfer
Enforcement
The PIPL vs. the GDPR
With 17 short lectures.
Around an hour of video.
And 7 multiple choice quizzes.
Course topics
Context & characteristics
This introduces the Chinese legal system and sets the PIPL’s context. Outlines the PIPL, its principles and territorial scope.
Terminology & roles
Lists key data protection terminology used in the PIPL. Outlines major roles under the PIPL.
Lawful processing & notices
Describes the conditions under which personal information may be lawfully processed. Outlines sensitive personal information handling requirements. Presents data subject notice requirements.
Individuals’ rights
Outlines rights granted to individuals by the PIPL.
Data governance, security & data breaches
Introduces data governance and security compliance obligations personal information handlers must adhere to.
Cross-border data transfer
Explains the localisation requirement, the explicit cross-border consent requirement, and the conditions a handler must adhere to.
Enforcement
Explains China’s approach to personal information protection enforcement. Lists administrative penalties. Details other enforcement approaches, including civil liability and criminal liability.
The PIPL vs. the GDPR
Presents key similarities and differences between the PIPL and the EU’s General Data Protection Regulation, the GDPR.
Who is the target audience?
Staff dealing with personal information of people within China
Those seeking an introduction to China’s Personal Information Protection Law, the PIPL
