Asian Business Law Institute and Future of Privacy Forum

May 2022

This report provides a detailed overview of relevant laws and regulations in China on:

• notice and consent requirements for processing personal data;
• alternative legal bases for processing personal data which permit processing of personal data without consent if the data controller undertakes a risk impact assessment (e.g., legitimate interests); and
• statutory bases for processing personal data without consent, and exceptions or derogations from consent requirements in general and sector-specific laws and regulations.