China’s personal data regulation – Personal Information Protection Law (PIPL) explained

An analysis of PIPL the Chinese equivalent of the GDPR which applies to the processing of personal information within China and outside of China.

PIPL is broadly the equivalent of Europe’s GDPR. Crossing certain volume thresholds for processing personal data can lead to a requirement for storing that data in China.
Related laws and mechanisms required to permit full compliance with the PIPL continue to be a work in progress.

PIPL applies to the

Free Trial

Register for free to keep reading.

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Regular podcasts from trusted external experts
  • Fresh compliance and regulatory content every day
Register for free Already a member? Sign in