Regulating Personal Data Protection in China: Practices and Future Directions
Abstract
Personal data protection in China has become a focal point in the country's evolving digital economy. With the rapid expansion of data-driven technologies, the Chinese government has enacted and enforced several laws and regulations to safeguard personal information, including the Cybersecurity Law of 2017 and the Personal Information Protection Law (PIPL) of 2021. This paper explores the practices and prospects of personal data protection regulation in China, focusing on the existing regulatory framework, enforcement mechanisms, and the challenges faced by both the government and businesses in ensuring compliance. Additionally, it discusses China's evolving stance on data sovereignty and its alignment with global data protection standards, particularly the General Data Protection Regulation (GDPR). The paper concludes with an outlook on the future trajectory of personal data protection in China.
Keywords
Personal Data Protection, Data Privacy, Cybersecurity LawHow to Cite
References
Chen, Bing. 2023. Building a Scientific Data Element Trading System. People’s Forum: Academic Frontier 6: 66–78. [Google Scholar]
Chen, Bing, and Guangkun Guo. 2022. The Positioning and Rules of Data Classification and Grading—An Expansion Centered on the Data Security Law. Studies on Socialism with Chinese Characteristics 3: 50–60. [Google Scholar]
Chen, Bing, and Yongji Liu. 2024. Promotion and Advancement of Data Security Governance in China. Electronics 13: 1905. [Google Scholar] [CrossRef]
Ehimuan, Benedicta, Ogugua Chimezie, Onyinyechi Vivian Akagha, Oluwatosin Reis, and Bisola Beatrice Oguejiofor. 2024. Global data privacy laws: A critical review of technology’s impact on user rights. World Journal of Advanced Research and Reviews 21: 1058–70. [Google Scholar] [CrossRef]
License
Copyright (c) 2025 Huáng Mengqi
This work is licensed under a Creative Commons Attribution 4.0 International License.