Barbara Li (CN)

Firm/Organization: Norton Rose Fulbright

Blogs: Data Protection Report, Financial services: Regulation tomorrow

Latest Articles

China overhauls its Foreign Investment Regulatory Regime

By Barbara Li (CN) on March 26, 2019

On March 15, 2019, the long-awaited Foreign Investment Law of China (Foreign Investment Law) was passed at the National People’s Congress of China, turning a new chapter of regulatory and legal regime for foreign direct investment in the second largest economy in the world. Our briefing note on the new regime can be found here. …

Data Protection Report

New China Guideline for Internet Personal Information Security Protection

By Barbara Li (CN) & Bohua Yao (CN) on December 5, 2018

On November 30, 2018 the Cyber Security Protection Bureau, under the auspices of the PRC Ministry of Public Security (the “MPS”), issued a draft Guideline for Internet Personal Information Security Protection (the “Guideline”) along with a request for public comments.…

Data Protection Report

China issues Personal Information Security Specification

By Barbara Li (CN) & Jane Wang (CI) on February 5, 2018

iStock_000014370535_Large China East Asia Xian Temple Night Urban City Lights

On 29 December 2017 the Standardization Administration of China issued an Information Security Technology – Personal Information Security Specification（GB/T 35273-2017）(the “Specification”), which will come into effect on 1 May 2018.…

Data Protection Report

China Seeks Comment on Draft Regulation on Critical Information Infrastructure

By Barbara Li (CN), Anna Gamvros (HK), Tom Wong & Ruby Kwok (HK) on July 17, 2017

On 10 July 2017 the Cyberspace Administration of China (CAC) issued a draft Regulation on the Protection of Critical Information Infrastructure (CII Regulation) for public comment. The comment period ends on 10 August 2017. This long-anticipated regulation, formulated pursuant to Article 31 of the Cyber Security Law of China (Cyber Security Law), is a key implementing measure for the Cyber Security Law. In this client update we outline the key features of the draft CII…

Financial services: Regulation tomorrow

China Amends Draft Regulation on Cross-Border Data Transfer

By Barbara Li (CN) & Tom Wong on May 23, 2017

We have just received a revised draft of China’s Measures on Security Assessment of Cross-border Data Transfer of Personal Information and Important Data (Measures). We have outlined the changes made to the draft Measures first issued on 11 April 2017 for public comment (see our previous briefing and blog post). The revised draft is likely to be the final version of the Measures. The Measures are to take effect on the same day as China’s Cyber…

Data Protection Report

China Amends Draft Regulation on Cross-Border Data Transfer

By Barbara Li (CN) & Tom Wong on May 23, 2017

We have just received a revised draft of the Measures on Security Assessment of Cross-border Data Transfer of Personal Information and Important Data (Measures). Here we outline the changes made to the draft Measures first issued on 11 April 2017 for public comment (see our previous briefing and blog post here). The revised draft is likely to be the final version of the Measures. The Measures are to take effect on the same day as…

Data Protection Report

Cross-border data transfers: China issues new measures to strengthen data localisation

By Barbara Li (CN), Tom Wong, Anna Gamvros (HK) & Ruby Kwok (HK) on May 3, 2017

The Cyberspace Administration of China (CAC) issued draft measures for implementing the data localisation provisions under the Cybersecurity Law of China (Cybersecurity Law) and the National Security Law of China on 11 April 2017. The draft regulations are open for public comment until 11 May 2017.…

Data Protection Report

China data privacy: New guidance to strengthen protection of personal data

By Barbara Li (CN), Anna Gamvros (HK) & Tom Wong on March 7, 2017

China’s guidance on privacy of personal data is set to change in the near future, following the publication of a draft guideline in late 2016. Though a date has not yet been set for the guideline to be finalised, companies should take the opportunity to assess whether they will need to make changes to their systems and processes to bring them in line with the guidance as currently set out. The draft guideline document, “Information…

Data Protection Report

China Cybersecurity: New Law Increases Security Regulation Over Cyberspace

By Anna Gamvros (HK), Barbara Li (CN) & Olivia Yang on November 17, 2016

On November 7, 2016, the Standing Committee of China’s National People’s Congress (NPC) voted to pass the Cyber Security Law (unofficial English translation). Its draft has gone through three rounds of readings and it will become effective from June 1, 2017. This legislation provides for the Chinese government’s supervisory jurisdiction over cyberspace, defines security obligations for network operators and enhances the protection over personal information. It also establishes a regulation regime in respect…

Financial services: Regulation tomorrow

Cyber security in China: Draft law strengthens regulation of internet and data privacy

By Barbara Li (CN) & Rachel Xia on July 17, 2015

China has published a draft Cyber Security Law (Draft Law) for public discussion and feedback until 5 August 2015. This law, if enacted in its current form, will have far-reaching consequences for financial institutions with operations in China. In recent years, China has dedicated efforts to enhance the security and supervision of the Internet and telecommunication networks, in particular, regulating the use of personal data and protections against cyberattacks. In the absence of a comprehensive data privacy law in…

Barbara Li (CN)

China overhauls its Foreign Investment Regulatory Regime

New China Guideline for Internet Personal Information Security Protection

China issues Personal Information Security Specification

China Seeks Comment on Draft Regulation on Critical Information Infrastructure

China Amends Draft Regulation on Cross-Border Data Transfer

China Amends Draft Regulation on Cross-Border Data Transfer

Cross-border data transfers: China issues new measures to strengthen data localisation

China data privacy: New guidance to strengthen protection of personal data

China Cybersecurity: New Law Increases Security Regulation Over Cyberspace

Cyber security in China: Draft law strengthens regulation of internet and data privacy

Company

Support

New to the Network