PIPL’s Localization Requirements and Restrictions on Responding to Foreign Judicial and Enforcement Agencies

China’s Personal Information Protection Law requires that operators of critical information infrastructure and personal information processors that process personal information in an amount that reaches “the threshold specified by” the Cyberspace Administration of China store personal information collected and generated in China locally.