China’s Evolving Data Governance Regime

The document below includes an overview of China’s evolving data governance regime, which began developing in 2015 with the draft of China’s Cybersecurity Law. In 2022, Chinese regulators are implementing and enforcing more data-related laws and regulations, which stand to have a significant effect on organizations handling any data within China’s borders. As these measures create more barriers for cross-border data flows, China’s approach runs counter to longstanding U.S. policies that support free flows of information and an open digital ecosystem.