Personal Information Protection Law (PIPL) · Yalla China
中华人民共和国个人信息保护法 / Personal Information Protection Law of China (PIPL)
Enacted: 2021-08-20 ✅ Effective: 2021-11-01
📝 Overview
China's first comprehensive personal data protection law, defining individual rights and data processor obligations, with strict penalties for violations.
This is general information only, not legal advice. For your specific case, consult a licensed lawyer.
📜 The law text / key provisions
PIPL requires data processors to: obtain explicit consent before processing sensitive data; disclose collection purposes; provide mechanisms for data deletion and correction; conduct data protection impact assessments before high-risk processing. The law grants individuals rights of access, correction, deletion, and objection to automated processing. Penalties: administrative fines up to 50 million CNY or 5% of annual revenue, plus civil liability for individual harm.
💬 Practical reading
💬 This is a general reading/opinion for orientation — not the official legal text nor legal advice.
Applies to anyone processing data of persons in China regardless of company location. Primary source of digital rights for foreigners residing in China.
📎 Official source
National People's Congress Standing Committee
🕒 Updated: 16 March 2026