PrivacyChina

China Privacy Law Compliance Guide

Map China personal-information processing, separate consent, sensitive data, app minimization, PIPIA, and cross-border transfer routes before collection, vendor review, or data export.

Prepare the PIPL and data export evidence file
By Sorena AIOfficial citationsPractical launch evidence
Quick scan
Privacy
Map personal-information processing
Identify personal information, sensitive personal information, minors, entrusted processing, automated decisions, and rights workflows before collection or use.
Choose the export route
Screen cross-border transfers against security assessment, standard contract, and newer cross-border data flow provisions.
Keep privacy evidence
Maintain notices, consent records, PIPIA files, SCC/security assessment packages, app minimization mapping, and rights-response logs.

Review this hub before China launch, vendor review, data transfer, permit filing, product release, or evidence refresh for China Privacy Law.

Key dates
1 Nov 2021
PIPL effective
1 Jun 2023
SCC measures effective
1 Sep 2022
export assessment effective
22 Mar 2024
cross-border provisions
What this hub helps you decide
Map personal-information processing
Identify personal information, sensitive personal information, minors, entrusted processing, automated decisions, and rights workflows before collection or use.
Choose the export route
Screen cross-border transfers against security assessment, standard contract, and newer cross-border data flow provisions.
Keep privacy evidence
Maintain notices, consent records, PIPIA files, SCC/security assessment packages, app minimization mapping, and rights-response logs.
Map personal-information processing
Choose the export route
Keep privacy evidence
Publication details
Editorial metadata for this artifact
Author
Sorena AI
Published
Jul 5, 2026
Updated
Jul 5, 2026

This hub explains China PIPL, the main China compliance routes, and the launch evidence product, legal, security, privacy, certification, and operations teams should maintain.

China Timeline

Key dates for China Privacy Law

Track only legal adoption, promulgation, effective, implementation, filing, and transition dates from official sources for China Privacy Law.

Loading timeline...

Topic guides

Deep dive pages for implementation planning, controls, reporting, and evidence.

1
App minimum necessary personal information by category
App category mapping page for common mobile app necessary personal information scope, using only categories supported by the official source.
Read Guide
2
China app personal information minimization
How to map app category, basic functions, and necessary personal information under China mobile app personal-information rules.
Read Guide
3
China data export security assessment workflow
Workflow for screening data export security assessment triggers, materials, owners, and evidence records.
Read Guide
4
China personal information cross-border transfer routes
How to route China personal information exports across security assessment, standard contract, and newer cross-border data flow provisions.
Read Guide
5
China personal information standard contract filing workflow
Workflow for the PIPL standard contract route, assessment, filing package, and cited evidence.
Read Guide
6
China PIPL compliance checklist
Checklist for PIPL processing activity maps, notices, consent, separate consent, sensitive PI, entrusted processing, export route, and app minimization evidence.
Read Guide
7
China PIPL deadlines and compliance calendar
Official privacy, app minimization, SCC, data export assessment, and cross-border data flow dates.
Read Guide
8
China PIPL penalties and enforcement exposure
China privacy penalties and operational exposure under PIPL and data export rules.
Read Guide
9
China PIPL privacy notice and consent checklist
Practical notice, consent, separate consent, sensitive PI, and rights-handling checklist under PIPL.
Read Guide
10
China PIPL requirements
China Personal Information Protection Law requirements by processing lifecycle, including consent, sensitive PI, rights, exports, breach response, and evidence.
Read Guide
11
China PIPL vs CCPA/CPRA
Comparison of China PIPL and California CCPA/CPRA for global privacy teams.
Read Guide
12
China PIPL vs EU GDPR
Comparison of China PIPL and EU GDPR for privacy teams handling global data processing and transfer programs.
Read Guide
13
China PIPL vs Singapore PDPA
Comparison of China PIPL and Singapore PDPA for APAC privacy programs.
Read Guide
14
China Privacy Law FAQ
Answers to practical China Privacy Law questions for scope, official source triggers, evidence records, and related China scope decisions.
Read Guide
15
PIPL automated decision-making and personalized recommendations
Practical checks for automated decision-making transparency, fairness, choice, and evidence under PIPL.
Read Guide
16
PIPL breach response and notification
How to document breach response, mitigation, notification analysis, and evidence under China personal information rules.
Read Guide
17
PIPL cross-border transfer route selector
Route selector for China personal information exports across security assessment, standard contract, and lower-risk/exemption analysis.
Read Guide
18
PIPL entrusted processing and vendor contracts
How to document entrusted processing, vendor responsibilities, contract controls, and evidence under PIPL.
Read Guide
19
PIPL impact assessment template
Template fields for a China personal information protection impact assessment and export/entrusted-processing evidence.
Read Guide
20
Sensitive personal information and separate consent under PIPL
How to identify sensitive PI triggers, separate consent, minors, additional safeguards, and evidence records.
Read Guide
Next step

Prepare the PIPL and data export evidence file

Sorena AI turns China PIPL official requirements into scoped decisions, evidence records, owner assignments, and change-trigger reviews.

What this unlocks
  • Start with the official trigger and the product, app, data flow, equipment, supplier, or lifecycle role that creates the China Privacy Law question.
  • Research Copilot keeps the official citation, decision owner, evidence record, and approval history connected.
  • SSOT preserves official citations, launch facts, evidence files, and refresh history when product, supplier, app, data, equipment, or disposal facts change.
Recommended route
Open Research Copilot
Map processing maps, separate consent, sensitive PI, entrusted processing, PIPIA, SCC filings, security assessment, and rights records to official citations, owners, and review checkpoints.
Supporting route
Open SSOT
Keep official citations, decisions, approvals, and evidence records connected to governed product and compliance files.
Talk to Sorena
Review unresolved triggers
Check edge cases before launch, filing, transfer, import, sale, or disposal.
Discuss your setup
China Privacy Law artifact preview
Share it internally
Download the timeline export to align legal, product, engineering, and commercial teams on milestones and deadlines.