On August 20, 2021, the People’s Republic of China passed its first comprehensive data privacy law, the Personal Information Protection Law (PIPL). The law, set to take effect on November 1, 2021, includes several new obligations for companies handling personal information collected from the country’s citizens. It stipulates that the collection and processing of personal information be limited to the minimum level necessary for an organization’s specific purpose. This applies to entities outside of China that are processing any personal information from people within China, meaning it has sweeping impacts globally.
