Xiaoyan Zhang

Firm/Organization: Reed Smith LLP

Latest Articles

Final guideline for Internet personal information protection published by Chinese Ministry of Public Security

By Xiaoyan Zhang, Amy Yin, Jim Barbuto & Catherine Jing

May 12, 2019

After soliciting public comments since last November, the Chinese Ministry of Public Security (MPS) published the finalized Guideline for Internet Personal Information Security Protection (Guideline) on April 10, 2019. The Guideline applies to Personal Information Holders, defined as entities or individuals that “control and process personal information” through their provision of services using the Internet, private networks, or offline. As China’s primary cybersecurity regulator under China’s Cybersecurity Law (CSL), MPS previously issued regulations specific to…

Technology Law Dispatch

California lawmakers propose new CCPA amendments that address major concerns of the business community while preserving the privacy law

By Xiaoyan Zhang, Gerard Stegmaier & Kimberly Gold

May 2, 2019

Last week, the California Assembly’s Committee on Privacy and Consumer Protection, which exercises jurisdiction over privacy and personal information protection matters, approved several amendment bills intended to clarify and narrow the scope of the California Consumer Privacy Act (CCPA or the Act). In January 2020, the CCPA will impose landmark burdens and obligations on businesses that in many respects go beyond those required by the EU’s General Data Protection Regulation (GDPR). Businesses nationwide will be…

Technology Law Dispatch

Algorithmic Accountability Act proposed by U.S. lawmakers

By Stephanie Wilson, Jennifer Driscoll, Xiaoyan Zhang & Jim Barbuto

April 25, 2019

On April 10, U.S. lawmakers introduced the Algorithmic Accountability Act (the AAA). The AAA empowers the Federal Trade Commission (FTC) to promulgate regulations requiring covered entities to conduct impact assessments of algorithmic “automated decision systems” (including machine learning and artificial intelligence) to evaluate their “accuracy, fairness, bias, discrimination, privacy and security.” The bill is evocative of a significant trend and strategy to regulate technology and the use of personal data while reinforcing regulatory power at…

Technology Law Dispatch

Draft amendments to China’s personal information standards proposed

By Xiaoyan Zhang, Jim Barbuto, Trevor Satnick, Amy Yin & Catherine Jing

February 21, 2019

China’s National Information Security Standardization Technical Committee issued draft amendments (Amendments) to the standards that govern the protection of personal information, “Information Security Technology – Personal Information Security Specification” (Standards, effective May 1, 2018) on February 1, 2019. The Standards provide guidance on interpreting China’s Cybersecurity Law (CSL) and set out best practices for the collection and processing of personal information in China. If the Amendments pass, they would place the Standards among the other…

Technology Law Dispatch

The new China cybersecurity inspection regulation broadens PSB authority

By Xiaoyan Zhang, Ariana Goodell & Danielle Liebl

November 5, 2018

China’s new “Regulation on the Internet Security Supervision and Inspection by Public Security Organs” went into effect on November 1, 2018. It is the latest regulation passed by China’s Ministry of Public Security that executes China’s Cybersecurity Law, which took effect in June of last year. The regulation gives China’s Public Security Bureaus (PSBs) broad authority for how they conduct cybersecurity inspections of businesses providing or using internet services in China. PSBs broad authority is…

Technology Law Dispatch

Southeast Asian nations to form regional framework for cybersecurity cooperation

By Charmian Aw & Xiaoyan Zhang

September 26, 2018

The Association of Southeast Asian Nations (ASEAN) announced last week that it will create a rules-based framework for its 10 member states to cooperate on cybersecurity matters. The 10 ASEAN members are Singapore (which is the chair for ASEAN this year), Malaysia, Indonesia, the Philippines, Thailand, Vietnam, Brunei, Myanmar, Laos and Cambodia. Singapore is expected to take the lead in drawing up a mechanism that facilitates cross-country collaboration on cyber policy development, capacity building and…

Technology Law Dispatch

“Privacy First Policy” to be on November ballot in San Francisco

By Xiaoyan Zhang & Ariana Goodell

August 1, 2018

San Francisco voters will decide on November 6, 2018, whether to enact the city’s “Privacy First Policy” that intends to protect the personal information of residents and visitors from misuse by companies doing business in San Francisco. The policy builds upon the California Consumer Privacy Act passed in June 2018, which gives consumers various rights, such as the right to know what information is being collected about them and whether it is being sold and…

Xiaoyan Zhang

Final guideline for Internet personal information protection published by Chinese Ministry of Public Security

California lawmakers propose new CCPA amendments that address major concerns of the business community while preserving the privacy law

Algorithmic Accountability Act proposed by U.S. lawmakers

Draft amendments to China’s personal information standards proposed

The new China cybersecurity inspection regulation broadens PSB authority

Southeast Asian nations to form regional framework for cybersecurity cooperation

“Privacy First Policy” to be on November ballot in San Francisco

Stay Connected

Company

Support

New to the Network