Barbara Li (CN)

Photo of Barbara Li (CN)
Firm/Organization: Norton Rose Fulbright
Blogs: Data Protection Report, Financial services: Regulation tomorrow

Latest Articles

On 10 July 2017 the Cyberspace Administration of China (CAC) issued a draft Regulation on the Protection of Critical Information Infrastructure (CII Regulation) for public comment. The comment period ends on 10 August 2017. This long-anticipated regulation, formulated pursuant to Article 31 of the Cyber Security Law of China (Cyber Security Law), is a key implementing measure for the Cyber Security Law. In this client update we outline the key features of the draft CII…
We have just received a revised draft of China’s Measures on Security Assessment of Cross-border Data Transfer of Personal Information and Important Data (Measures). We have outlined the changes made to the draft Measures first issued on 11 April 2017 for public comment (see our previous briefing and blog post). The revised draft is likely to be the final version of the Measures. The Measures are to take effect on the same day as China’s Cyber…
iStock_000014370535_Large China East Asia Xian Temple Night Urban City Lights
We have just received a revised draft of the Measures on Security Assessment of Cross-border Data Transfer of Personal Information and Important Data (Measures).  Here we outline the changes made to the draft Measures first issued on 11 April 2017 for public comment (see our previous briefing and blog post here). The revised draft is likely to be the final version of the Measures.  The Measures are to take effect on the same day as…
Norton Rose Fulbright - Data Protection Report blog
Hacker using laptop. Lots of digits on the computer screen.
The Cyberspace Administration of China (CAC) issued draft measures for implementing the data localisation provisions under the Cybersecurity Law of China (Cybersecurity Law) and the National Security Law of China on 11 April 2017. The draft regulations are open for public comment until 11 May 2017.…
China’s guidance on privacy of personal data is set to change in the near future, following the publication of a draft guideline in late 2016. Though a date has not yet been set for the guideline to be finalised, companies should take the opportunity to assess whether they will need to make changes to their systems and processes to bring them in line with the guidance as currently set out. The draft guideline document, “Information…
iStock_000014370535_Large China East Asia Xian Temple Night Urban City Lights
On November 7, 2016, the Standing Committee of China’s National People’s Congress (NPC) voted to pass the Cyber Security Law (unofficial English translation). Its draft has gone through three rounds of readings and it will become effective from June 1, 2017. This legislation provides for the Chinese government’s supervisory jurisdiction over cyberspace, defines security obligations for network operators and enhances the protection over personal information. It also establishes a regulation regime in respect…
China has published a draft Cyber Security Law (Draft Law) for public discussion and feedback until 5 August 2015. This law, if enacted in its current form, will have far-reaching consequences for financial institutions with operations in China. In recent years, China has dedicated efforts to enhance the security and supervision of the Internet and telecommunication networks, in particular, regulating the use of personal data and protections against cyberattacks. In the absence of a comprehensive data privacy law in…
Norton Rose Fulbright - Data Protection Report blog
On July 6, 2015, China’s top legislative body – the National People’s Congress – published a draft Cyber Security Law that, if enacted in its current form, will have far-reaching consequences for businesses operating in China. The draft expressly provides that the law will apply equally to both Chinese and international businesses.…