Data Privacy – China: Personal Information Protection Law

The Personal Information Protection Law of the People's Republic of China referred to as the Personal Information Protection Law or ("PIPL") protecting personal information rights and interests, standardize personal information handling activities, and promote the rational use of personal information. It also addresses the transfer of personal data outside of China.

On 20 August 2021 China approved the PIPL, the first comprehensive data protection legislation in the region. The Law entered into effect on 1 November 2021 and established personal information processing rules, data subject rights, and obligations for personal information processors, among other things. In addition to the PIPL, the NPC has also approved, on 10 June 2021, the Data Security Law, which entered into effect on 1 September 2021. The Data Security Law regulates data processing activities associated with personal and non-personal data.

There are also provisions related to personal data protection in several other pieces of legislation; most notably the Cybersecurity Law 2016 which came into effect in 2017 ('the Cybersecurity Law') which provides certain general requirements.

In addition, there are numerous non-binding guidelines and standards, which provide best practice recommendations for the handling of personal data. 

Please see below documents which details how we process your Personal Data in Kongsberg Maritime China and Kongsberg Digital China.  

For all other Personal Data Processing information outside of China please see the Kongsberg Gruppen Privacy Statement