The new Chinese data protection law, the Data Security Law (DSL), which is to regulate the use of personal data, is largely based on the EU General Data Protection Regulation (GDPR). Unlike the EU, Beijing reserves extensive data processing powers. For foreign companies with data in China, the legal basis will change this year.
