CPD/CPT Course:
New PRC Data
Regulations
- How Do International
Businesses Adapt?

Frankie is an international technology lawyer of Eversheds Sutherland.  She is qualified in Hong Kong, New York, and England & Wales.  Her practice covers a wide array of commercial and tech-related matters, including significant technology outsourcing transactions, Fintech, Regtech and blockchain services agreements and data privacy matters.  Frankie is a member of the Vetting Committee of Hong Kong Innovation and Technology Commission's General Support Programme, where she advises the Government on merits of technology projects.  She is on the advisory board of the Stanford University's Responsible Digital Leadership project.  She teaches Regtech and Fintech programmes at postgraduate degrees, and has extensive experience sharing at professional bodies' CPD programmes and industry conferences.  Frankie has mentored distributed ledger technology companies at accelerator programmes.

The new PRC Data Security Law came into force on 1 September 2021.  Soon after, the new PRC Personal Information Protection Law became effective since 1 November 2021.  There are new requirements and new concepts introduced to create the arguably most stringent data regulatory regime.

• History and Background of PRC personal and general data law (including the PRC Cybersecurity Law);
• Key concepts under PRC cybersecurity and data protection law (eg. data localisation, “critical information infrastructure operator”, “separate consent”, etc.);
• New concepts introduced in the new PRC Data Security Law and PRC Personal Information Protection Law; and
• Practical steps for implementation by organisations.