Join our webinar on democratizing data in the cloud with Forrester, Snowflake and TIAA - Sign up here

Start Now

China DSL

Get compliant with the most comprehensive PrivacyOps platform.

China's PIPL

Know all about China's Personal Information Protection Law (PIPL)
Download Infographic
Available in PDF

On June 10, 2021, China's National People’s Congress Standing Committee passed the Data Security Law (the “DSL”) in order to standardize data processing activities, ensure data security, promote data development and utilization, and protect the legitimate rights and interests of individuals and organizations.

The DSL applies to the data processing activities and their security supervision within the territory of China. It also regulates data processing activities conducted outside of China that harm China’s national security or public interest, or the legal interests of citizens and organizations in China. The DSL primarily focuses on data security and lays out a number of obligations for organizations regarding data categorization and classification, data risk controls, contingency responses for data security, and data export controls.

The DSL is said to become effective on September 1, 2021, leaving less than three months for companies to adapt to the new data security law.

The solution

SECURITI enables organizations to comply with the DSL through AI-driven PI data discovery, DSR automation, documented accountability, enhanced visibility into data processing activities, and AI-driven process automation.

securiti dashboard

SECURITI supports enterprises in their journey toward compliance with the DSL through automation, enhanced data visibility, and identity linking.

See how our comprehensive PrivacyOps platform helps you comply with various sections of DSL


 

Customize a data subject rights request portal for seamless customer care

With the DSR request format, create customized web forms according to your brand image and accept verified data subject rights requests. Automate the initiation of fulfillment workflows when verified requests are received.

dsr portal
personal data monitoring tracking

Continuous monitoring and tracking

Articles: 8, 12, 30, 32

Keep track of risks against non-compliance to the DSL requirements by continuously monitoring and scanning data.

Assess DSL readiness

Articles: 2, 3, 4, 8, 27, 29, 32, 34

Measure your organization's posture against the DSL requirements with the help of our multi-regulation, collaborative, readiness, and data protection assessment system. Seamlessly expand assessment capabilities across your vendor ecosystem to maintain compliance against the DSL requirements.

Assess GDPR readiness
map data flows

Map data flows and generate reports

Articles:7, 30, 33

Track data flows in your organizations, trace this data, catalog, transfer, and document business process flows internally and to service providers or third parties.

Manage vendor risk

Articles: 30, 33

Track, manage, and monitor privacy and security readiness for all your service providers from a single interface. Collaborate instantly, automate data requests and manage all vendor contracts and compliance documents.

manage vendor risk

Facts related to DSL

1

The DSL will go into effect on 1st September 2021.

2

Under the DSL, cross-border transfer of important data is to be treated by critical information infrastructure (“CII”).

3

Service providers are required to obtain licences for relevant data processing services.

4
Violators of DSL may face fines of no less than 100,000 yuan ($15,660) but no more than one million yuan.
5
The DSL will apply to data recorded in electronic and other forms.