Short namePIPL
Statuseffective
Promulgation date2021-08-20
Effective date2021-11-01
Issuing authorityStanding Committee of the National People's Congress
Last updated2026-05-20
Chinese original sourceCyberspace Administration of China publication, source: China NPC
Translation statusSite reference translation in progress

Summary

China's central personal information protection law, setting rules for processing personal information, individual rights, cross-border data transfer, personal information processor duties, and enforcement.

The PIPL is the core statute for personal information protection in China. This page tracks the legal source, translation status, selected article translations, and related compliance mechanisms.

Use this page as a structured reading entry. It is not legal advice, and the Chinese text shall prevail.

Key Obligations

  • Process personal information under lawful, legitimate, necessary, and good faith principles.
  • Provide notification and obtain consent or another lawful basis where required.
  • Obtain separate consent for specified higher-risk processing activities.
  • Conduct personal information protection impact assessments for specified scenarios.
  • Meet statutory requirements before providing personal information to overseas recipients.

Related Documents

Article Index

This law currently has 2 structured article records in the MVP dataset.

  1. Article 1 Article 1 states the purpose of the PIPL. It frames the law around protection of personal information rights, regulation of processing, and reasonable use.
  2. Article 2 Article 2 establishes the basic protection rule: personal information rights belong to natural persons and cannot be infringed by organizations or individuals.
Open bilingual translation page

Disclaimer

This website is for informational and educational purposes only. It does not constitute legal advice. The Chinese text shall prevail. Users should consult qualified legal counsel for specific matters.