(By Lisa Li)The EU General Data Protection Regulation (“GDPR”) affects a broad range of people outside the EU. Certain Chinese businesses are very likely to be bound by GDPR. This article briefly discusses how GDPR affects Chinese businesses and what Chinese businesses should do to comply with GDPR.

1.The Application of GDPR to Chinese Businesses

This is a matter of applicability. GDPR applies to the following people.

(a) People established in the EU who control or process data and process personal data while doing business regardless of where these data are processed.