Raymond Wang and Yihan Zang of Shihui Partners discuss China’s proposed new national standard for data protection audits, which represents the latest enhancement of personal data protection in the county.
近日，世辉律师事务所合伙人王新锐律师与臧翌晗律师受国际权威法律评级机构钱伯斯邀请，为其“专家焦点”栏目撰写了《中国加强个人信息保护合规审计》一文。钱伯斯“专家焦点”栏目聚焦于法律领域的最新动态，关注全球法律专业人士关心的法律趋势和风险，旨在呈现法律专家对实时热点话题的专业洞见。
Recently, Raymond Wang and Yihan Zang of Shihui Partners were invited by Chambers, a globally renowned legal rating agency, to contribute an article to its Expert Focus column. The article is titled “China Is About to Beef Up Personal Data Protection Audits”. Chambers Expert Focus is dedicated to innovation in the law and key legal trends and risks that are of interest to legal professional worldwide. Its aim is to showcase insights of legal experts on current hot topics.
文章介绍了推荐性国家标准《数据安全技术-个人信息保护合规审计要求（征求意见稿）》（“国标意见征求稿”）的出台背景、几大亮点，并就企业如何有效开展个人信息保护合规审计提供实践指引。
This article introduces the background and several highlights of the recommended national standard the Data Security Technology - Personal Information Protection Compliance Audit Requirements (the “Draft National Standard”) , and provides practical guidance on how to effectively carry out compliance audit of personal information protection.
随着国标意见征求稿的出台，企业需要为开展个人信息保护合规审计做好准备。企业应熟悉该标准的详细要求，建立符合审计要求的合规能力
With the introduction of the Draft National Standard, enterprises need to prepare for compliance audits of personal information protection. They familiarize themselves with the detailed requirements of the standards, and establish the compliance ability to meet the audit requirements.
完整版的文章可在钱伯斯网站上查阅（点击文末“阅读原文”）。
The full article can be accessed on Chambers website (Click "Read the original" at the end of the text).
如您就本文有任何疑问或者希望与作者就相关问题进行交流，欢迎通过下文方式联系撰文作者。
If you have any questions about the article or hope to reach out to the authors for discussions, please refer to the contact information below.
作者简介
The Authors
合伙人 | Partner
王新锐 | Raymond Wang
wangxr@shihuilaw.com
王律师长期深耕网络安全和数据保护业务，其提供深度法律服务的客户包括数十家中外顶级科技公司，亦为多个中央部委和地方政府的数据立法和监管工作提供支撑。王律师作为中方专家，入选ICC（国际商会）、B20（二十国集团工商峰会）等国际组织的数字治理工作组。此外，王律师是《个人信息保护国际比较研究》《数据服务框架》两本书的主要作者，并有大量文章和译作公开发表，专业观点经常被新华社、人民网等国内外主流媒体引用。近两年，王律师作为课程讲师在北大、清华等多所著名高校讲授网络法和数据保护相关内容，并兼任对外经贸大学法学院高级研究员。
Mr. Raymond Wang's practice focuses on cybersecurity and data protection. He frequently advises leading multinational and domestic technology companies, ministries and local governments with respect to legislative and regulatory programs. He sits on the expert panel for the ICC's Data Governance Working Group and the B20 Organization Compliance Working Group. He is one of the key authors of the monograph 'International Comparative Study on Personal Information Protection' and 'Data Service Framework'. He has published many articles, reports and translation works in the field of personal information protection, and has also taught courses related to data protection and cyber law at both Peking and Tsinghua universities.
王新锐律师毕业于清华大学法学院，执业已超过20年，曾长期在国内顶尖律师事务所工作，现为世辉律师事务所合伙人。2018年以来，王律师在TMT和数据保护领域先后获得Chambers、The Legal 500、ALB、《商法》、China Law ＆ Practice、asialaw、LEGALBAND等多个法律专业评级机构的推荐，其中包括ALB China十五佳TMT律师、The Legal 500亚太数据保护领先律师（2021-2024）、LEGALBAND中国顶级律师排行榜：网络安全和数据保护（第一梯队）（2019-2024）等个人奖项。
Raymond Wang is the head of our compliance department and he has been practicing law for more than 20 years. Raymond has been recommended by various authoritative legal media and rating agencies in the categories of 'TMT' and 'Data Protection', including Chambers & Partners, The Legal 500, Asian Legal Business (ALB), China Business Law Journal, China Law & Practice, asialaw Profiles, and LEGALBAND. His specific accolades include being recognised by: ALB as one of the China 'Top 15 TMT Lawyers'; The Legal 500 Asia Pacific as a 'Special Recommended Lawyer' listed in the 'Data Protection' category from 2021 to 2024 and LEGALBAND in the category of 'Top Ranked Lawyers - Cybersecurity & Data Compliance' (the top tier) from 2019 to 2024.
合伙人 | Partner
臧翌晗 | Yihan Zang
zangyh@shihuilaw.com
世辉合规团队简介
Shihui’s Compliance Team
世辉律师事务所汇聚了众多一线的优秀律师，致力于成为法律服务行业的引领者。以卓越的法律服务与商业洞见，世辉长期成功服务国内外知名企业，并得到了市场广泛认可。
At Shihui, we are a team of talented, passionate legal practitioners who are committed to maintaining our position as strong yet adaptable market leaders. We serve our PRC and overseas clients with solid legal expertise and valuable business insights, distinguishing ourselves in the market with a well-built reputation as trusted and dedicated advisers.
世辉长期关注企事业单位在经营发展和业务活动过程中的合规建设，并致力为企事业单位提供优质的合规咨询服务。善于根据客户的不同行业、不同领域、不同需求，从客户业务目的出发，从不同角度分析客户的法律及合规风险，并为客户提供系统化、个性化的解决方案。世辉合规团队目前拥有7位合伙人，业务领域涵盖了反贿赂反腐败、反舞弊、数据合规、反垄断、制裁/反制裁与出口管制与劳动合规。
We have long been involved in the establishment of our clients’ internal compliance and control systems, capitalizing on our in-depth understanding of regulatory supervision and risk control across various business sectors. We provide comprehensive yet tailor-made solutions to assist our clients in dealing with all kinds of regulatory and compliance issues in all aspects of their operations. Our compliance team currently consists of seven partners, whose areas of interest cover anti-bribery and anti-corruption, anti-fraud, data, anti-trust, sanctions/anti-sanctions, export controls, and employment.
往期推荐
03 |
04 |
