Among the most controversial is the data localization mandate requiring “operators of key information structure” (CIIOs) to retain critical data and PII generated within the course of business in China
This law also includes data localization requirements (personal data on Chinese citizens must be kept on domestic servers), personal data use and disclosure requirements, “real name” polices (users of instant message and other network services are required to register with their real identity), and whistleblower protections, among other things
For multi-national companies, the problem is already hard enough when it comes to dealing with local regulations for records, privacy, and data localization