The recent adoption of China’s sweeping new cyber-security law, and a follow-up draft security review framework published last month, serves as a stern warning to foreign companies in the country that it’s time to reassess your data privacy practices and cyber-security controls.

The Standing Committee of the National People’s Congress, China’s top legislature, passed the “Cyber-security Law of the People’s Republic of China” in November. It takes effect June 1, 2017.

Jaclyn Jaeger is a freelance contributor to Compliance Week after working for the company for 15 years. She writes on a wide variety of topics, including ethics and compliance, risk management, legal,...