What does this cover?

The Ninth Amendments to the Criminal Law of the People's Republic of China have been passed by the National People’s Congress. The key changes deal with (among other things) data privacy and will come into effect on 1 November 2015. Amendments have been made in relation to the sale or provision of personal data (Article 253-1) with penalties including fines and potential imprisonment for those with direct responsibility for breaches of the provisions.

What action could be taken to manage risks that may arise from this development?

Companies should take legal advice in China on complying with the new law.