Data Protection

1. Future parties of a potential licensing deal involving the PRC data should be aware of the expansion of the（）of export control.
5. A stricter（）is expected in managing and processing “national core data”.
8. If a personal data processor gets sued for allegedly（）of an individual’ rights and interests in personal information and fails to prove that it was not at fault, it shall be liable for damages.
10. Under the Data Security Law and the Personal Data Protection Law, Chinese regulators can exert（）over overseas activities if certain criteria are met.
12. “National（）data,” means data that concerns national security, people’s livelihood in general or important public interest, or is crucial to national economy.
13. In addressing cross-border（）of personal information, the Personal Information Protection Law requires processors to perform an impact assessment.
14. Processors are only permitted to process sensitive personal information if it is for a specific and（）purpose and demonstrates necessity.
15. The Personal Information Protection Law（）the personal data protection rules previously scattered across different laws and regulations.
16. Under the Data Security Law, data relating to protection of national security and interest or（）of international obligations that is categorized as controlled items may be subject to export control.

2. In addressing cross-border transfer of important data, the Data Security Law distinguishes operators of（）information infrastructure and other data processors.
3. The （）or illegal use of “sensitive personal information” would easily cause harm to the dignity of individuals or serious damages to the safety of individuals or properties.
4. In addition to data and privacy laws, there are other layers of Chinese（）that may impact data processing activities.
6. Depending on the seriousness of the relevant violations, regulators may（）illegal gains and impose fines.
7. The Personal Information Protection Law also sets out a series of penalties for（）.
9. If other data processors need to transfer important data outside the PRC, they must follow the security rules to be established by regulators（）to the Data Security Law.
11. “Anonymization” means an（）process in which personal information is processed in a manner that has made it impossible to associate such information with any specific individual.