As Prescribed

China’s long-awaited Personal Information Protection Law (PIPL) has potentially significant implications for pharmaceutical and medical device companies doing business in China or with the market in China. Personal health information is considered sensitive personal information and is now subject to enhanced data compliance requirements for collection, processing, and cross-border transfer. After two rounds of draft versions, the PIPL was finally passed by the Standing Committee of the National People's Congress on August 20, 2021 and will become effective November 1, 2021.