PIPL
What is PIPL?
China's Personal Information Protection Law that regulates the processing of personal information of individuals within China by both domestic and foreign entities.
Terms that appear alongside pipl
Each of these is named in at least one of the same controls as pipl. The number is how many controls name both.
- consent 5 shared controls
- personal information protection 4 shared controls
- compliance 4 shared controls
- data protection 4 shared controls
- gdpr 3 shared controls
- data breach notification 3 shared controls
- data breach 3 shared controls
- breach notification 3 shared controls
Frameworks that govern pipl
What the standards actually require on pipl
Requirements naming pipl across 5 standards, quoted from the control text.
HK PDPO operates under One Country Two Systems separation from mainland China data protection regime (PIPL + DSL + CSL each covered as its own framework).
HK-PDPO-Coord-China-PIPL-APEC-CBPR-2024-2025-Pipeline-AI-Breach · HK PDPO Coordination with China PIPL + APEC CBPR + Global CBPR Forum + 2024 Generative AI Model Framework + Pending 2025 Mandatory Breach + Administrative Fines →Where the recommendation/generation services process personal information through automated decision-making, the Personal Information Protection Law requires transparency and fairness of the decision, prohibits unreasonable differential treatment in trading co...
CN-PIPL-A24 · Automated Decision-Making Transparency (PIPL) →Security Dimension 8 Privacy per X.805 Clause 6.8: Privacy shields what could be inferred by watching activity on the network, for example websites visited by users + their geographic location + the IP addresses and DNS names assigned to devices inside a provi...
X805-Dim8-Privacy-Identification-Network-Activity-Personal-Information-Confidentiality · ITU-T X.805 Security Dimension 8 - Privacy + Identification of Network Activity + Personal Information Confidentiality + Subscriber Anonymity + Pseudonymity + Anti-Tracking + Location Privacy + Data Minimization + GDPR/CCPA Alignment →Article 12 of the Kazakhstan PDPL establishes the data localization requirement for biometric personal data of Kazakhstan citizens and residents - a key sovereignty provision strengthened by the 2022 amendment.
KZ-PDPL-Biometric-Data-Localization-Article12-Server-Kazakhstan-On-Soil-Data-Storage-Citizens-Residents · Kazakhstan PDPL Biometric Data Localization + Article 12 + Mandatory Server Storage in Kazakhstan + 2022 Amendment + Citizens + Residents + Foreign Cloud Provider Restrictions + Data Sovereignty + State Service for Information Security Oversight →Apply data minimisation + scope enforcement + localisation + cross-border transfers per applicable regulation. Data Minimisation and Scope Enforcement must (a) enforce OAuth scope checking at every API endpoint + (b) return only data within authorised scope +...
OPENBANK-5 · Data Minimisation, Scope Enforcement, Localisation, Cross-Border Transfers →Questions people ask about pipl
What is PIPL?
Why is PIPL important for compliance?
Which compliance frameworks address PIPL?
Where can I learn more about PIPL?
See how PIPL applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.