On 29 December 2025, the Cyberspace Administration of China (CAC) issued the Announcement on Submitting the Compliance Audit Status of Minor Personal Information Protection (the "Announcement").
On 28 October 2025, the Standing Committee of the National People's Congress adopted a set of amendments to the Cybersecurity Law (CSL), which will take effect on 1 January 2026.
On 9 September 2025, the PRC National Cybersecurity Notification Centre released an official announcement stating that the Public Security Bureau (PSB) had conducted an administrative investigation and imposed penalties on Dior Shanghai for unlawful cross-border transfers of personal information.
This landmark case clarifies that in hotel management, the transfer of personal information beyond what is necessary for fulfilling the contract must be subject to separate consent from the customer, rather than relying on a general consent through the privacy policy.
This landmark case clarifies that in hotel management, the transfer of personal information beyond what is necessary for fulfilling the contract must be subject to separate consent from the customer, rather than relying on a general consent through the privacy policy.
