The Personal Information Protection Law of the People’s Republic of China (Chinese: 中华人民共和国个人信息保护法; pinyin: Zhōnghuá rénmín gònghéguó gèrén xìnxī bǎohù fǎ) referred to as the Personal Information Protection Law or (“PIPL”) protecting personal information rights and interests, standardize personal information handling activities, and promote the rational use of personal information. It also addresses the transfer of personal data outside of China.

The PIPL was adopted on August 20, 2021, and is effective November 1, 2021.  It is related to, and builds on top of both China’s Cybersecurity Law (“CSL”) and China’s Data Security Law (“DSL”). The PIPL is similar to, and partly based on, the European Union’s GDPR.