Jurisdiction Guide
China Privacy & Data Protection Laws
Every regime below can apply to a business handling China residents' data, depending on whether you have an established presence there, actively offer goods or services to residents, or monitor their behavior. This is a general reference, not a determination for your specific business — run the full questionnaire to see which of these actually apply to you.
Comprehensive Privacy Law · 1
Article 3 applies PIPL to all processing of personal information within China's borders, and separately extends extraterritorially to processing outside China where it is for the purpose of providing products/services to individuals in China, or analyzing/evaluating their behavior — a dual offering-goods/monitoring-behavior test distinct from but similar in effect to GDPR Art. 3. Article 72 exempts natural persons' purely personal/household processing; state organs are subject to a distinct chapter of obligations rather than being exempted, and health/financial data are treated as sensitive personal information requiring heightened, not reduced, protection.