1 November PIPL enters into force and even applies for companies outside of China

As the Chinese equivalent of GDPR, the Personal Information Protection Law ("PIPL") will change the current landscape of scattered provisions on personal information protection. Rules and practice for processing information are clarified, the obligations of data controllers and processors, and the rights of data subjects are increased. The law also outlines requirements regarding international data transfers. Notably, sanctions against violating companies includes fines up to RMB 50 million or 5% of annual turnover.

PIPL applies to all companies present in China. It also has extraterritorial effect for companies outside of China processing personal information arising within China. You should therefore also join this seminar to be able to raise the risk to your Norwegian headquarter.

Key take-aways include:

• An overview of PIPL and how it applies and its link to other Chinese laws;
• Analysing China's PIPL and how it compares to the EU's GDPR;
• Steps to take in preparation for the law's enforcement;
• Case studies and examples relevant to Norwegian subsidiaries in China;
• What measures should be taken to mitigate data privacy threats, and what can be considered as "low hanging fruit"; and
• What are the most important things to consider in order to be compliant with the new law.

Agenda:

• 6:00-6:30 PM: Registration
• 6:30-6:35 PM: GDPR introduction
• 6:35-7:00 PM: Presentation on PIPL legal matters
• 7:00-7:30 PM: PSU risk and case study presentation
• 7:30-7:45 PM: Q&A
• 7:45-9:00PM Dinner & Mingling

Venue: F-3, Suzhou-Wuxi Room, River Wing, Pudong Shangri-La|浦东香格里拉大酒店浦江楼3楼苏州-无锡厅

Participation: Free for members; 700RMB/non-members (Western buffet and wines are served)

Registration: Please sign up by October 11st. For participation of equal opportunities to all members, cancellation notice is required at least 3 days prior to the event by contacting chenye@norbachina.com.