Insight
China Enhances Personal Information Protection Through Mandatory Compliance Audits
China's new regulatory framework for personal information protection compliance audits has become effective? The Personal Information Protection Compliance Audit Measures (“Audit Measures”), effective May 1, 2025, mandates biennial audits for entities processing over 10 million individuals' data, with supplementary guidelines (Compliance Audit Requirements and Professional Institution Service Requirements) standardizing procedures and auditor qualifications. Key obligations include event-triggered audits following significant breaches, rigorous assessment of consent mechanisms, cross-border transfers, automated decision-making, and minors’ data protection. Professional audit institutions now require formal certification, minimum staffing thresholds including senior auditors, and strict independence protocols. Enterprises should proactively establish audit-ready compliance systems, conduct gap analyses, implement technical monitoring tools, and engage accredited auditors to mitigate liability exposure under this strengthened regime.
30 June 2025
Insight
China’s Technology Import/Export Control: A Crucial Compliance Landscape
China’s regulatory framework for cross-border technology transfers has gained prominence amid global tech competition and geopolitical shifts. While U.S. export controls often dominate discussions, China’s evolving system—rooted in decades of legislative development—demands careful navigation. Below is a streamlined overview of critical aspects of the regime.
10 June 2025
Insight
Fed. Circ. Ruling May Signal Software Patent Landscape Shift
In the 10 years since the U.S. Supreme Court's landmark decision in Alice Corp. v. CLS Bank International, lack of subject matter eligibility under Title 35 of the U.S. Code, Section 101, has become the first line of defense in patent litigation, especially in the software industry.[1]
01 November 2024
