China’s Congress passed the Personal Information Protection Law on August 20 and it will become effective as of November 1 this year. It copies the EU’s General Data Protection Regulation (GDPR) in many ways. It will reach across borders and will therefore affect all payment companies that deal with China.