The Cyber Security Law of the People’s Republic of China (the “Law”) released on November 7, 2016 will take effect as of June 1, 2017. The Law defines personal information and provides that any individual or organization shall neither acquire personal information by stealing or in other illegal ways, nor illegally sell or provide personal information to others. Particularly, the Law imposes strict responsibility of personal data protection on network operators, which include companies providing services through the Internet. We are expecting that more regulations on personal data protection will be released and may have a significant impact on online service providers. In this context, employers should also be cautious in collecting and using employees’ personal information for employment purposes and enhance protection of employees’ personal information.