What It Is

Personal Information Protection Law (PIPL) is China's first comprehensive national regulation specifically governing the collection, processing, storage, transfer, and deletion of personal information. Enacted August 2021 and effective November 1, 2021, it applies to domestic and foreign organizations processing data of individuals in China, with strong extraterritorial scope. Modeled partly on GDPR, it adopts a risk-based approach focused on consent, minimization, and national security.

Key Components

• Eight chapters, 74 articles covering processing rules, cross-border transfers, individual rights, handler obligations.
• Core principles: lawfulness, necessity, minimization, transparency, accountability.
• Seven legal bases led by consent; strict rules for sensitive personal information (biometrics, health, minors' data).
• Cross-border mechanisms: security assessments, SCCs, certification; individual rights including deletion, portability. Compliance via internal governance, no universal certification but audits for large handlers.

Why Organizations Use It

• Mandatory for China-exposed entities to avoid fines up to 5% annual revenue or RMB 50M.
• Enables market access, builds consumer trust, enhances operational resilience.
• Mitigates breach risks, supports cross-border business, boosts reputation in digital economy.

Implementation Overview

Phased framework: gap analysis, data mapping, policy development, controls, ongoing audits. Applies to all sizes handling Chinese PI, especially multinationals in tech, finance, e-commerce. Requires PIPOs, DPIAs, training; 6-12 months typical.

What It Is

ENERGY STAR is a U.S. government-backed voluntary labeling and benchmarking program administered by the EPA since 1992, in coordination with DOE. It certifies superior energy efficiency across products, homes, commercial buildings, and industrial plants. The primary purpose is market transformation through trusted signals of top-tier performance, using performance thresholds, standardized tests, and independent verification.

Key Components

• **Performance thresholdsCategory-specific metrics (e.g., EER/IEER for HVAC, AFUE for furnaces) above federal minimums.
• **Standardized testingDOE-referenced methods (e.g., 10 CFR).
• **Third-party certificationEPA-recognized labs/CBs, via Qualified Product Exchange.
• **Ongoing verification5-20% annual testing, disqualification for failures.
• **Brand governanceStrict mark usage rules. Covers ~65 product categories, Portfolio Manager for buildings.

Why Organizations Use It

Reduces energy costs ($500B saved since inception), emissions (4B tons avoided), unlocks rebates/procurement. Builds reputation, meets ESG goals, differentiates in markets.

Implementation Overview

Phased: assess/gap analysis (4-8 weeks), design/testing/certification (3-12 months), deployment, ongoing verification. Applies broadly; annual building recertification by PE/RA optional but recommended.