Insight Search Search Submit Sort by: Relevance Date Search Sort by RelevanceDate Order AscDesc Whitepaper September 18, 2022 Point of View: China’s Cybersecurity Law: Personal Information Protection Overview As part of our series providing insights into the Cybersecurity Law of the People’s Republic of China (PRC), this Point of View (POV) highlights a key area pertaining to personal information protection. Personal information is defined as information that can be used individually or in combination with other information to identify a person. Requirements around the … Whitepaper August 17, 2020 Point of View: Interpretations of the updates of China’s Cyber Security Law All companies incorporated within Mainland China are required to abide by the Cybersecurity Law of The People's Republic of China (PRC), which went into effect 1 June 2017. Given the complex business relationships within the international market, the Cybersecurity Law will continue to have important political, economic, and technical implications for both domestic and multinational corporations (… Whitepaper September 15, 2022 Point of View: Data Cross-Border Transfer As part of our series providing insights into the Cybersecurity Law of the People’s Republic of China (PRC), this fifth installment focuses on the cross-border transfer of data — or data localization — that is outlined in Article 37. This article covers the transfer and access of personal information and important data collected by critical information infrastructure (CII) operators in mainland… Whitepaper September 18, 2022 Point of View: Multiple-level Protection Scheme In part one of our Point of View series Interpretations of the updates to China’s Cybersecurity Law, we highlighted the updated legal requirements that impact organizations looking to do business in mainland China. One of these is the Multi-Level Protection Scheme (MLPS), an administrative requirement found in Article 21 of the Cybersecurity Law. Initially introduced in 1994, an updated MLPS… Whitepaper September 18, 2022 Point of View: Critical Information Infrastructure As part of our series providing insights into the Cybersecurity Law of the People’s Republic of China (PRC), this fourth installment focuses on the requirements in Section Two, Chapter Three, pertaining to Critical Information Infrastructure (CII) operators. According to the Cybersecurity Law, CII is defined as any information infrastructure that can endanger national security, national strategy… Whitepaper July 10, 2023 《专业视角》:ISSB可持续信息披露准则解读 本文围绕ISSB发布的《国际财务报告可持续披露准则第一号-可持续相关财务信息披露-一般要求》和《国际财务报告可持续披露准则第二号-气候相关披露》,分析编制过程、实施节奏和关键内容,解读其对企业的启示。 Flash Report April 18, 2023 《快报》:COSO发布关于可持续发展报告内部控制的补充指南 COSO发布了补充指南,就如何将目前适用于财务报告的2013年版《内部控制整合框架》(ICIF) 应用于可持续发展报告中进行了说明。于本文,甫瀚就补充指南的详细内容、适用原则及核心要点予以阐述和评论。 Whitepaper July 27, 2023 《专业视角》:《信息安全技术 个人信息处理中告知和同意的实施指南》—— 构建“告知 – 同意”体系 2023年5月,国家标准化管理委员会和国家市场监督管理总局联合发布了国标GB/T 42574-2023《信息安全技术 个人信息处理中告知和同意的实施指南》,对告知与同意的适用情形、基本原则等进行规定。