Regulations and Laws in China

Insight

China's new regulatory framework for personal information protection compliance audits has become effective? The Personal Information Protection Compliance Audit Measures (“Audit Measures”), effective May 1, 2025, mandates biennial audits for entities processing over 10 million individuals' data, with supplementary guidelines (Compliance Audit Requirements and Professional Institution Service Requirements) standardizing procedures and auditor qualifications. Key obligations include event-triggered audits following significant breaches, rigorous assessment of consent mechanisms, cross-border transfers, automated decision-making, and minors’ data protection. Professional audit institutions now require formal certification, minimum staffing thresholds including senior auditors, and strict independence protocols. Enterprises should proactively establish audit-ready compliance systems, conduct gap analyses, implement technical monitoring tools, and engage accredited auditors to mitigate liability exposure under this strengthened regime.

30 June 2025

Insight

Since early 2025, the China National Intellectual Property Administration (CNIPA) has raised the evidentiary requirements for applicants. They now need to provide more substantial non-use evidence and disclose more about their identity and intent in certain cases. These changes aim to curb malicious applications and improve examination efficiency. This newsletter will outline the key changes and the reasons behind them, and will offer strategic advice to help cancellation applicants and trademark registrants adapt to the new procedural landscape.

30 June 2025

Insight

Data misuse and breaches remain two of the most significant threats to data security. China’s Cybersecurity Law, Data Security Law and Personal Information Protection Law set strict standards to prevent improper handling, however, even after years of legal updates and recent draft amendments that increase penalties for large-scale incidents, high-profile breaches keep making headlines.

10 June 2025

Insight

China’s regulatory framework for cross-border technology transfers has gained prominence amid global tech competition and geopolitical shifts. While U.S. export controls often dominate discussions, China’s evolving system—rooted in decades of legislative development—demands careful navigation. Below is a streamlined overview of critical aspects of the regime.

10 June 2025

Insight

On January 12, 2025, the Guangdong Provincial Government introduced the Measures for High-Quality Development of Capital Markets to Support Guangdong’s Modernization (the “Measures”). These Measures lay out a detailed framework aimed at strengthening Guangdong’s multi-tiered capital markets, boosting tech-driven enterprises, and improving the overall quality of listed companies. The overarching goal is to position Guangdong as leading financial hub and embrace innovation to attract global investment.

07 March 2025

Insight

On January 16, 2025, the General Office of the Shanghai Municipal People’s Government released the Implementation Plan for Promoting the High-Quality Development of Digital Trade and Service Trade in Shanghai (the “Implementation Plan”). This strategic blueprint aims to establish Shanghai as a global hub for digital trade, which includes digital products, and technology-driven trade, as well as service trade, covering sectors such as finance, insurance, logistics, and cultural services. With a strong focus on reform, innovation, and the opening of key sectors, the Implementation Plan sets out a series of priorities and actionable steps to achieve these goals by 2029.

07 March 2025