Chinese first Personal Information Protection Law in contrast to the European GDPR

Daniel Albrecht, Computer Law Review International (CRi), 05/2021, P.142; publishing house Otto Schmidt

The development of big data brings convenience to life but also breeds chaos. The first personal information protection law of PRC was designed to curb collection of excessive personal information and its misuse, which is often a subject of complaints, the law seeks to ensure users' knowledge and consent when their personal data is collected and processed. This article compares relevant regulation on PIPL with GDPR from 13 aspects. From the comparison, we can see that most regulations in PIPL are similar to that in GDPR, especially at general processing principles and data subject’s rights. But there are still some differences at other aspects, such as cross-border data transfer rules.