On November 1, 2021, China’s Personal Information Protection Law (PIPL) will go into effect. Stanford University’s DigiChina website has published a translation, here. The PIPL is similar to the General Data Protection Regulation (GDPR) in many ways, however there are some important distinctions (IAPP gives a good overview, here).

As is the case with identified or identifiable data pertaining to individuals in the European Economic Area or United Kingdom (“Personal Data” under GDPR), Personal Information under PIPL is considered Sensitive research data, and must be treated accordingly per the Research Data Security Policy and Enterprise Information Security Policy.... Read more about Personal Information Protection Law of the People’s Republic of China

International projects and collaborations are an instrumental part of Harvard's research community. Certain activities, such as working with Personal Data per the General Data Protection Regulation (GDPR), require researchers and administrators to be aware of applicable restrictions and considerations. To help clarify some of GDPR's relevant requirements, the Office of the Vice Provost of Research, with input from other stakeholders, has developed ...