On 1st November 2021, the new Personal Information Protection Law (PIPL) of the People’s Republic of China entered into force. This law applies to all organisations doing business in China or targeting people in China and has significant compliance consequences similar to GDPR. Five months after its implementation, PIPL is still a major concern for many organizations. What if there was a way to reduce your time to compliance with PIPL drastically by leveraging the privacy work you have already done? Join the TrustArc privacy experts on this webinar as they will give you an overview of the PIPL requirements and help understand better what your organisation rapidly needs to do to address this law. This webinar will review: - Frequently asked questions about PIPL - The enforcement mechanisms and potential fines - Your next steps to quickly ensure full compliance with PIPL - How to leverage the privacy work you have already done to be compliant

1. 1
1
© 2022 TrustArc Inc. Proprietary and Confidential Information.
PIPL Compliance:
How to Leverage your Privacy Work

2. 2
2
Speakers
Yi Lu
Global Privacy Manager
TrustArc
Paul Breitbarth
Data Protection Lead
Catawiki
K Royal
Lead Privacy Counsel
Outschool

3. 3
3
Agenda
• PIPL Overview
• Latest Addition to the PIPL Legislative Framework
• Frequently asked questions about PIPL
• The enforcement mechanisms and potential fines
• Your next steps to quickly ensure full compliance with PIPL
• How to leverage the privacy work you have already done to be compliant

4. 4
4
PIPL Overview
• Extraterritorial Effect
• Sensitive Information
• Consent
• Cross Border Data Transfer
• Platforms and Corresponding Obligation
• Enforcement

5. 5
5
Latest Addition to the PIPL Legislative Framework
• Privacy Notice Requirements: Internet Platform Product and Service Privacy Notice Requirements
○ published by Information Security Standards Committee 05/26/22(now open to public comment
for 2 months).
• Certification Requirements: Data Security Management Certification Rules
○ published by State Administration for Market Regulation (effective immediately 06/05/22).
• Cross Border Transfer Requirements:Draft Technical Specifications for Certification of Cross-Border
Processing of Personal Information
○ published by National Information Security Standardization Technical Committee, open for public
comment until 05/13/22.

6. 6
6
Thank You!
See http://www.trustarc.com/insightseries for the 2022
Privacy Insight Series and past webinar recordings.
If you would like to learn more about how TrustArc can support you with
compliance, please reach out to sales@trustarc.com for a free demo.