Law: The Shanghai Data Regulations (only available in Chinese here) ('the Regulations')

Regulator: The Municipal Internet Information Department

Summary: On November 29, 2011, the Standing Committee of the Shanghai Municipal People's Congress adopted the Shanghai Data Regulations (only available in Chinese here), which entered into effect on January 1, 2022. The Cyberspace Administration of Shanghai Municipal Committee is responsible and has been active in the enforcement of the Regulations. The Regulations are in accordance with the Personal Information Protection Law of the People's Republic of China (PIPL) and the Data Security Law of the People's Republic of China (DSL). However, the Regulations also address the specific obligations of data handlers, including notification obligations, the application of facial recognition technology, data security, and data transactions.