Privacy and Cybersecurity Law Developments in China, the EU and the US

March 1, 2019
9:00 A.M. – 3:00 P.M.
UCSF Mission Bay Conference Center
San Francisco, CA

Cross-border compliance poses major challenges: China is developing a robust commercial privacy and cybersecurity framework. In Europe, the General Data Protection Regulation (GDPR) took effect in 2018, with global impact. In the US, the Federal Trade Commission has assumed the role of privacy and cybersecurity regulator, but without general rule-making authority, and the US Congress this year will debate a comprehensive privacy law. Meanwhile, innovative companies want to offer their goods and services globally. They seek to ensure cross-border data flows. They also need consistency and certainty about requirements. This conference will address the question of interoperability: what strategies can global companies adopt in complying with the laws of China, the US and Europe (and, of course, the rest of the world) and how should the laws of those countries develop to better protect consumers while also fostering innovation and competition?

Topics included the definition of reasonable cybersecurity standards under the laws of China, the EU and the US; corporate data governance strategies in the face of overlapping requirements; and enforcement.





Peking University

The EastWest Institute

The United States Information Technology Office (USITO)

The Asia Society


New America