Key practical points:
• Consent: organizations must, in most cases, obtain your consent before collecting or processing your personal information.
• Purpose limitation: data is collected for a specific, clear purpose and should not be used for other purposes without a basis.
• Your rights: you have the right to access your data, correct it, and request deletion in appropriate cases.
• Withdrawing consent: you can usually withdraw your consent to processing later on.
• Cross-border transfer: sending data outside China is subject to special rules and conditions.
• If you run a business that collects customer data, you have duties to protect it and to tell users how it is used.
• Pay attention to the permissions you grant apps, and review privacy policies before agreeing.
💬 General consulting
Personal Information Protection Law (PIPL) · Yalla China
中华人民共和国个人信息保护法 / Personal Information Protection Law (PIPL)
Enacted: 2021-08-20 ✅ Effective: 2021-11-01
📝 Overview
This law regulates how personal data is collected and used, requiring consent and a clear purpose. It also gives you rights to access, correct and delete your data, and sets rules for transferring it outside China.
This is general information only, not legal advice. For your specific case, consult a licensed lawyer.
📜 The law text / key provisions
💬 Practical reading
💬 This is a general reading/opinion for orientation — not the official legal text nor legal advice.
Whether you are an ordinary app user or run a business collecting customer data, this law directly concerns you. As a user, pay attention to what you agree to and review permissions, and remember you have the right to access, correct and delete your data in many cases. As a business owner, make sure you collect data for a clear purpose and with consent, protect it, and follow the rules for transferring it outside China. This is a general orientation, not formal legal advice.
📎 Official source
National People's Congress / npc.gov.cn
🕒 Updated: 16 March 2026