China Amends Draft Regulation on Cross-Border Data Transfer

By Barbara Li (CN) on May 23, 2017 Posted in Compliance and risk management, Regulatory response

Data Protection Report - Norton Rose Fulbright

We have just received a revised draft of the Measures on Security Assessment of Cross-border Data Transfer of Personal Information and Important Data (Measures). Here we outline the changes made to the draft Measures first issued on 11 April 2017 for public comment (see our previous briefing and blog post here). The revised draft is … Continue reading

Cross-border data transfers: China issues new measures to strengthen data localisation

By Barbara Li (CN), Anna Gamvros and Ruby Kwok (HK) on May 3, 2017 Posted in Compliance and risk management, Regulatory response

Norton Rose Fulbright - Data Protection Report blog

The Cyberspace Administration of China (CAC) issued draft measures for implementing the data localisation provisions under the Cybersecurity Law of China (Cybersecurity Law) and the National Security Law of China on 11 April 2017. The draft regulations are open for public comment until 11 May 2017.… Continue reading

Privacy action in Russia indicates enforcement focus on Western companies

By Vera Shaftan (RU) on February 15, 2015 Posted in General, Regulatory response

According to news reports in Russia, the Russian Federation’s data protection authority – Roscomnadzor – may be targeting Western companies for enforcement action. What appears to be the first enforcement action of this kind is directed at Twitter. At the heart of the action is an assertion by the head of Roscomnadzor that, while Twitter … Continue reading