Inside Asian Gaming

IAG JAPAN OCT 2021 46 China. In fact, overseas businesses that process personal information outside of mainland China will be required to set up an agency or appoint a designated representative within China to handle matters related to personal information protection, and record it with the Chinese authorities. The law also imposes restrictions on cross-border transfers of personal information from mainland China to overseas locations, includingMacau and Hong Kong. Certain requirements, such as additional security assessments, protection certifications, contracts or risk assessments, must be fulfilled prior to overseas transfers of data to these locations. Given thatmainlandChinesecustomers constitute the largest market segment for Macau IR operators, the effect of the new Chinese Personal Information Protection Law on business operations will need to be closely assessed ahead of the effective date on 1 November. In particular, the procedures for collection of personal information through in-market apps, WeChat official accounts and mini-programs, websites and any subsequent overseas transfer to Macau appear a priority for review. The penalties for infringing the new law are high, including fines of up to RMB 50 million (US$7.7 million) or 5% of the company’s annual turnover for serious offences. Although enforcement of the new law is untested, the Chinese authorities have recently taken an assertive stance on data privacy violations in the technology sector. The Cyberspace ALL-IN DIGITAL