Public source reference library for China data regulation
Source policyMy LibraryEN / CN
China Data RegulationLegal reference library
Search library

Law Library / Personal Information Protection

Personal Information Protection Law of the People's Republic of China

中华人民共和国个人信息保护法

Open full-text pageOfficial source
Short namePIPL
English namePersonal Information Protection Law of the People's Republic of China
Chinese official name中华人民共和国个人信息保护法
JurisdictionChina
Statuseffective
Promulgation date2021-08-20
Effective date2021-11-01
Issuing authorityStanding Committee of the National People's Congress
Last reviewed2026-05-20
Last updated2026-05-20
Source typeofficial
Translation typeunofficial_internal_translation
Chinese original sourceCyberspace Administration of China publication, source: China NPC
Translation status74 site reference translation records published; editorial review ongoing
Article structure74 articles; 74 article text and site reference translation records published
Unofficial translation notice

This is an unofficial English translation prepared for general informational purposes only. It does not constitute legal advice. In case of any discrepancy, the official Chinese text published by the competent authority shall prevail.

本文为非官方英文翻译，仅供一般信息参考，不构成法律意见。如与主管机关发布的中文正式文本不一致，以中文正式文本为准。

Overview

China's central personal information protection law, setting rules for processing personal information, individual rights, cross-border data transfer, personal information processor duties, and enforcement.

The PIPL is the core statute for personal information protection in China. This page tracks the legal source, 74 article-level records, site reference translation status, and related compliance mechanisms.

Use this page as a structured reading entry. It is not legal advice, and the Chinese text shall prevail.

Topic Navigation

  • Process personal information under lawful, legitimate, necessary, and good faith principles.
  • Provide notification and obtain consent or another lawful basis where required.
  • Obtain separate consent for specified higher-risk processing activities.
  • Conduct personal information protection impact assessments for specified scenarios.
  • Meet statutory requirements before providing personal information to overseas recipients.
Full-text bilingual pageArticle-by-article anchors and table of contents.Measures for Security Assessment of Cross-border Data TransferRelated source or reference page.Standard Contract MeasuresRelated source or reference page.Cross-border Data Flow ProvisionsRelated source or reference page.

Chapter Navigation

Related Documents

Amendment and Version History

  • 2021-08-20: Adopted. Adopted by the Standing Committee of the National People's Congress.
  • 2021-11-01: Effective. Effective date recorded from the official source.

Article Index

Chinese source text: 74 articles archived from the official source. English translation: 74 site reference translation records published; editorial review ongoing.

74 article-level records available.

Chapter I General Provisions

  1. Article 1Article-level record published
  2. Article 2Article-level record published
  3. Article 3Article-level record published
  4. Article 4Article-level record published
  5. Article 5Article-level record published
  6. Article 6Article-level record published
  7. Article 7Article-level record published
  8. Article 8Article-level record published
  9. Article 9Article-level record published
  10. Article 10Article-level record published
  11. Article 11Article-level record published
  12. Article 12Article-level record published

Chapter II Rules for Processing Personal Information

  1. Article 13Section 1 General RulesArticle-level record published
  2. Article 14Section 1 General RulesArticle-level record published
  3. Article 15Section 1 General RulesArticle-level record published
  4. Article 16Section 1 General RulesArticle-level record published
  5. Article 17Section 1 General RulesArticle-level record published
  6. Article 18Section 1 General RulesArticle-level record published
  7. Article 19Section 1 General RulesArticle-level record published
  8. Article 20Section 1 General RulesArticle-level record published
  9. Article 21Section 1 General RulesArticle-level record published
  10. Article 22Section 1 General RulesArticle-level record published
  11. Article 23Section 1 General RulesArticle-level record published
  12. Article 24Section 1 General RulesArticle-level record published
  13. Article 25Section 1 General RulesArticle-level record published
  14. Article 26Section 1 General RulesArticle-level record published
  15. Article 27Section 1 General RulesArticle-level record published
  16. Article 28Section 2 Rules for Processing Sensitive Personal InformationArticle-level record published
  17. Article 29Section 2 Rules for Processing Sensitive Personal InformationArticle-level record published
  18. Article 30Section 2 Rules for Processing Sensitive Personal InformationArticle-level record published
  19. Article 31Section 2 Rules for Processing Sensitive Personal InformationArticle-level record published
  20. Article 32Section 2 Rules for Processing Sensitive Personal InformationArticle-level record published
  21. Article 33Section 3 Special Rules for State Organs Processing Personal InformationArticle-level record published
  22. Article 34Section 3 Special Rules for State Organs Processing Personal InformationArticle-level record published
  23. Article 35Section 3 Special Rules for State Organs Processing Personal InformationArticle-level record published
  24. Article 36Section 3 Special Rules for State Organs Processing Personal InformationArticle-level record published
  25. Article 37Section 3 Special Rules for State Organs Processing Personal InformationArticle-level record published

Chapter III Rules for Cross-border Provision of Personal Information

  1. Article 38Article-level record published
  2. Article 39Article-level record published
  3. Article 40Article-level record published
  4. Article 41Article-level record published
  5. Article 42Article-level record published
  6. Article 43Article-level record published

Chapter IV Rights of Individuals in Personal Information Processing Activities

  1. Article 44Article-level record published
  2. Article 45Article-level record published
  3. Article 46Article-level record published
  4. Article 47Article-level record published
  5. Article 48Article-level record published
  6. Article 49Article-level record published
  7. Article 50Article-level record published

Chapter V Obligations of Personal Information Processors

  1. Article 51Article-level record published
  2. Article 52Article-level record published
  3. Article 53Article-level record published
  4. Article 54Article-level record published
  5. Article 55Article-level record published
  6. Article 56Article-level record published
  7. Article 57Article-level record published
  8. Article 58Article-level record published
  9. Article 59Article-level record published

Chapter VI Departments Performing Personal Information Protection Duties

  1. Article 60Article-level record published
  2. Article 61Article-level record published
  3. Article 62Article-level record published
  4. Article 63Article-level record published
  5. Article 64Article-level record published
  6. Article 65Article-level record published

Chapter VII Legal Liability

  1. Article 66Article-level record published
  2. Article 67Article-level record published
  3. Article 68Article-level record published
  4. Article 69Article-level record published
  5. Article 70Article-level record published
  6. Article 71Article-level record published

Chapter VIII Supplementary Provisions

  1. Article 72Article-level record published
  2. Article 73Article-level record published
  3. Article 74Article-level record published
Open full-text bilingual page