China’s Management Measures for Compliance Audit of Personal Information Protection, issued by the Cyberspace Administration of China (CAC), took effect on May 1, 2025. They build on the Personal Information Protection Law (PIPL) and introduce mandatory audits—clarifying who must conduct them, how often, and what they must cover. Companies that fail to comply may [...]