On August 20, 2021, the top legislative body in the People's Republic of China, the Standing Committee of the National People's Congress, passed the Personal Information Protection Law (PIPL).
The law went into effect November 1, 2021.
The PIPL applies to entities both within and outside of China that process personal information on natural persons within the territory of China. The measure impacts U.S. institutions with a physical site in China, particularly regarding how they have
to register and engage in connection to data sharing. It also impacts any college or university in the U.S. that processes personal information of Chinese residents for the purposes of providing products or services to individuals in China; "analyzing"
or "assessing" the behavior of individuals in China; or, as provided in Article 3 of PIPL, for other purposes to be specified by laws and regulations.