The Personal Information Protection Law (“PIPL“) requires a data controller to conduct compliance audits of its personal data processing activities on a regular basis (“Self-supervision Audits“).

The Measures outline requirements and procedures for self-initiated and regulator-mandated compliance audits from May 1, 2025. The Cyberspace Administration of China’s (CAC’s) official release of the ...

We collaborate with the world's leading lawyers to deliver news tailored for you. Sign Up for any (or all) of our 25+ Newsletters. Some states have laws and ethical rules regarding solicitation and ...

The Chinese government released proposed regulations that would require certain data processors to undergo annual or biennial audits on Thursday. The Chinese Cyberspace Office published the first ...

In today's heavily digital economy, data represents one of a company's most valuable assets and a key competitive advantage. But maximising the potential of data while adequately protecting it poses ...

The U.S. Department of Health and Human Services is meeting the minimum requirements for auditing health organizations’ data privacy practices, but a recent report shows there’s more work to be done ...