Skip to main content
People & firms

The WONE Global Partners in each market.

Named senior professionals, each admitted as the one firm for a service in their country, and the firms they lead.

For professional firms

Lead your service in your market.

One Partner per service, per jurisdiction, admitted by review against published criteria.

Open Partnerships→
Insights

Sourced answers on doing business across borders.

Every statement is labelled: source-checked, professionally reviewed or not yet checked, with its source and date where checked.

Ask WONE Global

Ask your question.

Answers cite WONE Global's sourced statements and show how each one was checked. Research, not advice.

Ask WONE Global→

China × Technology, Data & Cyber

Technology, Data & Cyber in China

Data, cyber and technology rules for running a digital business internationally. In China, that means local law, local regulators and local practice, handled by a qualified professional who practises there.

Who handles this work

On request

WONE Global can find the right Technology, Data & Cyber professional in China for you.

No WONE Global Partner holds this yet. Send us your requirement: WONE Global confirms whether a vetted Associate firm can act, tells you who it is and checks for conflicts before any work begins.

Bring a requirement →
China at a glanceEast Asia

Shanghai · Wednesday 4 November

03:05

Local time

Currency
CNY
Working week
Monday – Friday
Commercial centres
Shanghai · Beijing · Shenzhen · Guangzhou
Dialling code
+86
Region
East Asia
Doing business in China →

What the rules say in China

Technology, Data & Cyber, the essentials

From the China market guide: the points that matter most for technology, data & cyber, each with the source it was checked against.

Essentials guide · Source-checked research100% of statements checked against a source25 checked against an official source25 checked against a secondary sourceChecked 2026-10-19Not yet professionally reviewed

  • The Personal Information Protection Law came into force on 1 November 2021.

    Processing of personal information in China and certain processing abroad of information about people in China.National People's Congress of the People's Republic of China · checked 2026-10-19
  • For serious violations of the Personal Information Protection Law, provincial-level or higher authorities may impose a fine of up to RMB 50 million or 5 percent of the previous year's turnover.

    Serious cases; responsible individuals can also be fined.National People's Congress of the People's Republic of China · checked 2026-10-19
  • Outbound data transfers may require a security assessment, a standard contract for personal information export, or personal information protection certification, procedures that mainly concern important data and certain volumes of personal information.

    National rules; the page gives no numeric volume thresholds.Shanghai Municipal People's Government (english.shanghai.gov.cn) · checked 2026-10-19
  • Under Shanghai's negative list for outbound data, covering finance, shipping, trade and commerce, and meteorology, data outside the list may be transferred abroad without these procedures, and the list now applies citywide.

    Shanghai only; 9 scenarios, 29 data subcategories and 109 data items.Shanghai Municipal People's Government (english.shanghai.gov.cn) · checked 2026-10-19
  • The Data Security Law was adopted on 10 June 2021 and took effect on 1 September 2021.

    Data processing activities, including important data.NPC Observer · checked 2026-10-19
  • An amendment to the Cybersecurity Law was adopted on 28 October 2025 and took effect on 1 January 2026.

    Network operators and critical information infrastructure.NPC Observer · checked 2026-10-19

Read the full guide: Data protection, cyber and digital

Scope

What the service covers here

  1. 01Map technology and data flows
  2. 02Identify privacy, cybersecurity and localisation requirements
  3. 03Review technology contracts and vendor dependencies
  4. 04Coordinate practical compliance across relevant markets

Key questions

What we will work through with you

  • What needs to be decided before technology, data & cyber work starts?
  • Who is professionally responsible in each country?
  • Which other work, such as tax or employment, must happen at the same time?
  • What information and decisions are needed from the business?

If your work involves another country or another area of expertise, WONE Global brings in the right professional and keeps all advisers informed.

WONE Global Partners in China

Professionals working here

No named lead for Technology, Data & Cyber yet — these WONE Global professionals already work in China and can bring the right local colleague in.

Roberto GilardinoShanghai · China

WONE Global Partner · China

Roberto Gilardino

Regional Partner North Asia & additional countries · Horizons (Shanghai) Corporate Advisory Company · Shanghai

Roberto Gilardino is Regional Partner at Horizons, supervising the advisory’s activities in North Asia as well as additional countries (including Mongolia, Malaysia, Indonesia, Pakistan, UAE, Cyprus and Malta).

WONE Global Intelligence

Ask about technology, data & cyber in China

Ask in your own words. Answers come from WONE Global's checked records, with every source shown, and end with the named Partner who can act. Go deeper on any point, or build a decision file.

Contact WONE Global

Discuss Technology, Data & Cyber in China.