2022 is a special year for China's data compliance framework. We have witnessed the implementation of the Data Security Law and the Personal Information Protection Law, the release of a revised draft of Cybersecurity Law, relevant supporting rules of the law, and active law enforcement activities.

Our GEN team has prepared a special year end review, sharing our observations and comments on data compliance. The review covers interpretation of the revised draft of the Cybersecurity Law, analysis of rules on cross-border data transfer, insights into data compliance rules on interconnected vehicles, and opinions on MLPS 2.0 requirements for cybersecurity. We hope that this review helps you better understand China's data compliance legislations and law enforcement trends.  Feel free to ask us any questions and comment! 

Dr. XUE is a senior counsel supervising the compliance practice of GEN Law Firm. She specializes in regulatory affairs in cybersecurity and data protection, antitrust and anti-unfair competition, anti-commercial bribery, and Chinese social credit system. Dr. Xue has extensive experience in the said areas and profound understanding of the complicated issues standing at the intersection of those topics. Dr. Xue studied competition law at the College of Law of the University of Illinois at Urbana Champaign and obtained J.S.D. degree. She also participated in many research topics led by law enforcement authorities and academia as a postdoctoral fellow at the Institute of Law of the Chinese Academy of Social Sciences, and actively contributed to the formulation of competition and data regulatory policies. Before joining GEN, Dr. Xue served as a senior attorney in two Chinese law firms. She authored many articles and reviews related to legal compliance and served as an editor of The China Competition Bulletin hosted by Australia and New Zealand Government College.

CHEN Yang focuses on cyber security and data protection, personal information protection and compliance supervision consulting, and has participated in many difficult and complex cases. Yang has the Chinese lawyer qualification and is a Certified Information Privacy Professional (Europe) and Certified Information Privacy Manager by the International Association of Privacy Professionals (IAPP), having rich experience in the field of data protection.