Passed by the National People’s Congress on 10 June, the Data Security Law (DSL) will take effect from 1 September 2021. As the DSL governs two highly consequential topics of data and security, amid extensive data growth and increasing security concerns, the legal system is complex and intertwined.