Hermes

Exclusive Content

Which data types must be localised in China under the Data Security Law?

Which data types must be localised in China under the Data Security Law? Under China’s Data Security Law (DSL, 数据安全法, shùjù ānquán fǎ), companies must

How much can foreign companies be fined for PIPL non-compliance in China?

How much can foreign companies be fined for PIPL non-compliance in China? Under China’s 个人信息保护法 (Personal Information Protection Law, PIPL, gèrén xìnx

What is the difference between PIPL, DSL, and CSL for cross-border data in China?

What is the difference between PIPL, DSL, and CSL for cross-border data in China? China's cross-border data regulatory framework is built on three int

Can my foreign company use SCCs instead of a security assessment in China?

Can my foreign company use SCCs instead of a security assessment in China? Yes — in most cases, foreign companies can use Standard Contractual Clauses

What data transfers from China require a security assessment for foreign companies?

What data transfers from China require a security assessment for foreign companies? A CAC security assessment is mandatory in four specific scenarios

How to Navigate China Data Security Law for Foreign Companies: 2026 Guide

How to Navigate China Data Security Law for Foreign Companies: 2026 Guide The China Data Security Law (数据安全法, shùjù ānquán fǎ), effective September 20