PIPL
China's PIPL governs personal information with consent and necessity rules, plus defined routes for cross-border transfers.
Definitions only — a term explained here is not a service we sell.
The PIPL is China's Personal Information Protection Law. It sets consent, necessity and cross-border conditions for personal information, and flows that touch China-side data need counsel to scope the obligations.
The first question is always what data is processed, by whom and where it goes.
Scope and cross-border steps
PIPL covers collection, storage, use, sharing, transfer and deletion of personal information in China, and in defined cases processing outside China that targets people in China. Consent is one basis among several. Sensitive personal information, including biometrics and financial accounts, carries stricter requirements.
Sending personal information abroad needs a defined route: a security assessment, certification or a standard contract, depending on the data and the parties. The exporter notifies the individual and obtains separate consent where required. Map the data and roles, then involve counsel before a pilot. This is general information, not legal advice. The China compliance page covers the wider filing context.