// Privacy
Personal Information Protection Law Compliance Software
China's comprehensive personal information protection law.
Framework at a glance
Short name
PIPL
Version
2021
Category
Privacy
Controls
36
What PIPL covers
36 controls across 5 domains — every one tracked, owned and evidenced in Cyber Horizon.
General Provisions
5 controls- Art.5 Lawfulness, Propriety and Good Faith
- Art.6 Purpose Limitation and Data Minimisation
- Art.7 Openness and Transparency
- Art.8 Quality of Personal Information
- Art.9 Security Responsibility
Rules for Handling Personal Information
13 controls- Art.13 Legal Bases for Processing
- Art.14 Valid and Informed Consent
- Art.15 Right to Withdraw Consent
- Art.16 No Denial of Service for Refusing Consent
- Art.17 Notice Before Processing
Rules for Cross-Border Provision
4 controls- Art.38 Conditions for Cross-Border Provision
- Art.39 Notice and Separate Consent for Cross-Border Provision
- Art.40 Data Localisation and Security Assessment
- Art.41 Response to Foreign Judicial or Enforcement Requests
Individuals' Rights in Processing
6 controls- Art.44 Right to Know and Decide
- Art.45 Right of Access and Copy
- Art.46 Right to Correction and Supplementation
- Art.47 Right to Deletion
- Art.48 Right to Explanation of Processing Rules
Obligations of Personal Information Handlers
8 controls- Art.51 Security and Internal Management Measures
- Art.52 Designation of a Data Protection Officer
- Art.53 Domestic Representative for Overseas Handlers
- Art.54 Regular Compliance Audits
- Art.55 Personal Information Protection Impact Assessment
How Cyber Horizon automates PIPL
Every PIPL control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is Personal Information Protection Law?
China's comprehensive personal information protection law.
How many controls does Personal Information Protection Law have?
Personal Information Protection Law (2021) has 36 controls in Cyber Horizon's catalogue, organised across 5 domains.
How does Cyber Horizon help with Personal Information Protection Law?
Cyber Horizon maps Personal Information Protection Law into a shared control library alongside every other framework you run, so evidence collected once counts towards PIPL and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More Privacy frameworks
See PIPL mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of PIPL in Cyber Horizon.