On 7 November 2016, the Standing Committee of the National People’s Congress of China (NPC) passed the controversial Cybersecurity Law (the “CSL”). The CSL has gone through three readings since the release of the first draft on 6 July 2015 and will take effect in June 2017. As China’s first comprehensive privacy and security regulation