PIPL Overview and Enforcement
China's PIPL, effective November 2021, mirrors GDPR in many provisions: consent requirements, data minimization, purpose limitation, and individual rights. Enforcement has resulted in $340 million in penalties through 2025. Major technology companies including Alibaba, Tencent, and ByteDance have been fined for violations. The law grants Chinese users rights to access, correct, and delete personal data.