Data localisation

VIETNAM: First Personal Data Protection Decree passed – What you need to know

Authors: Carolyn Bigg, Amanda Ge, Venus Cheung, and Gwyneth To. Vietnam’s long-awaited, first-ever Personal Data Protection Decree (“PDPD”) has finally been passed and is scheduled to take effect from 1 July 2023 (save limited grace period exceptions). The PDPD is the first comprehensive data protection regulation consolidating Vietnam’s existing data protection regulatory framework (which is …

VIETNAM: First Personal Data Protection Decree passed – What you need to know Read More »

China: Navigating China episode 18: Increased scrutiny over connected car and automobile industry data from Chinese regulators, including push towards data localisation

Authors: Carolyn Bigg, Venus Cheung and Fangfang Song Increased scrutiny over connected car and automobile industry data from Chinese regulators, including push towards data localisation The Chinese cybersecurity authorities have published new draft rules clarifying data and cyber compliance obligations for the automobile industry, including a push towards most personal information and important data being …

China: Navigating China episode 18: Increased scrutiny over connected car and automobile industry data from Chinese regulators, including push towards data localisation Read More »

China: Navigating China episode 17: China’s Draft Privacy and Security Laws – second drafts clarify compliance steps for businesses

Authors: Carolyn Bigg, Venus Cheung and Fangfang Song Second drafts of the new overarching national personal data protection and data security laws have just been published, and give a clearer picture of the impending new national frameworks in China. 1. Draft Personal Information Protection Law The Draft Personal Information Protection Law (“Draft PIPL”) will – …

China: Navigating China episode 17: China’s Draft Privacy and Security Laws – second drafts clarify compliance steps for businesses Read More »

China: Navigating China episode 16: New data lifecycle guidelines for financial institutions in China – detailed assessments, additional security measures and some data localisation introduced

Authors: Carolyn Bigg, Venus Cheung and Fangfang Song Important new guidelines outlining how personal and other types of financial information should be handled by financial institutions throughout the data lifecycle have just come into force in China, including a new data localisation obligation. The “Financial Data Lifecycle Guidelines” (金融数据生命周期安全规范) were published by the PBOC (the …

China: Navigating China episode 16: New data lifecycle guidelines for financial institutions in China – detailed assessments, additional security measures and some data localisation introduced Read More »

Russia: Penalties for Violation of Data Localization Rules are Dramatically Increased

Many companies have scrambled to comply with Russia’s peculiar Data Localization Rules since their enactment in 2015.  While these rules apply to a wide range of companies handling Russian personal data both in Russia and abroad, the penalties for non-compliance were traditionally limited only to blocking of the data operator’s websites.  This somewhat abstract penalty, …

Russia: Penalties for Violation of Data Localization Rules are Dramatically Increased Read More »

CHINA: data localisation – a growing trend?

Foreign companies operating in China, or looking to enter the Chinese market, are increasingly concerned as to whether Chinese law restricts cross-border transfers of personal data collected in China. In light of recent developments, is there a growing trend in China towards data localisation? As is generally the case with China’s data privacy framework, there …

CHINA: data localisation – a growing trend? Read More »