Security Management cited a LawFlash written by Morgan Lewis partners Todd Liao, Lesli Ligorner, Reece Hirsch, Gregory Parks, and Pulina Whitaker, along with associate Yuting Zhu, regarding China’s new Personal Information Protection Law (PIPL). “The law grants statutory rights to data subjects, such as the right to withdraw and modify consents, the right of data portability, and the right to refuse automated decision-making,” the LawFlash states. The LawFlash also explains how the PIPL calls for a number of new administrative requirements on data controllers, including “designating a data protection officer, signing data processing agreements with data processors, preparing data breach notices, conducting a personal information impact assessment, or in some cases obtaining regulatory approval for certain data processing transfer activities.”