The Civil Code of the People’s Republic of China (the “Civil Code”) was approved by the National People’s Congress of China on May 28, 2020 and took effect on Jan 1, 2021. In 2020, the draft versions of the Personal Information Protection Law (the “PIPL Draft”) and the Data Security Law (the “DSL Draft”) was also released for public comments. The two draft, once officially passed and implemented, will together with the Cyber Security Law of the People’s Republic of China (the“CSL”) become the three pillars in the realm of cyber security and data protection. Came into effect on 1 June 2017, the CSL forms the backbone of cybersecurity and data privacy protection. Since the CSL does not stipulate comprehensive rules, China’s data and privacy framework appears to be a patchwork with textures of various laws, measures, and sector-specific regulations, as well as national standards. From here, the threedimensional structure of “Civil Code – Data protection & Cyber security laws – Respective regulations and standards” has been established.