What is the PIPL DSAR deadline?

Under Personal Information Protection Law (PIPL), the standard response deadline is 30 days. The counting method is calendar days, starting from the day of receipt.

Can I extend a PIPL deadline?

Yes. An extension of 30 days is available when: Complex requests requiring additional time. You must notify the data subject within: Within the original 30-day deadline with reasons for extension.

PIPL is enforced by Cyberspace Administration of China (CAC). Maximum penalties: Up to RMB 50M or 5% of annual revenue; personal liability for responsible individuals.

🇨🇳PIPL

China — PIPL DSAR Deadline Calculator

Calculate your exact response deadline under Personal Information Protection Law (PIPL).

Configure your DSAR

Select jurisdiction, request type, and date — results update instantly.

Jurisdiction

Your deadline will appear here

Select a jurisdiction and request type to get started

PIPL Overview

Full Name

Personal Information Protection Law

Effective Since

2021-11-01

Regulatory Authority

Cyberspace Administration of China (CAC)

Official Text

View law

Maximum Penalties

Up to RMB 50M or 5% of annual revenue; personal liability for responsible individuals

Recent example: Didi Global fined RMB 8.026 billion (approx. USD 1.2B) in 2022

Request Types & Deadlines

Request Type	Deadline	Extension
Right of Access Art. 44-45 — Right to know and access personal information	30 days	+30 days
Right to Correction Art. 46 — Right to request correction of inaccurate personal information	30 days	+30 days
Right to Deletion Art. 47 — Right to request deletion of personal information	30 days	+30 days
Right to Portability Art. 45 — Right to transfer personal information to a designated handler	30 days	+30 days
Right to Restrict/Refuse Art. 44 — Right to restrict or refuse processing of personal information	30 days	+30 days

Extension Rules

Extension period: 30 days

Conditions: Complex requests requiring additional time

Notification required: Within the original 30-day deadline with reasons for extension

Special Rules & Common Mistakes

•Must respond within 30 calendar days — may extend by additional 30 days with notice
•PIPL applies extraterritorially to processing of Chinese residents' data outside China
•Cross-border data transfer requires security assessment, standard contracts, or certification
•Sensitive personal information has enhanced consent and processing requirements
•Personal information handlers must appoint a designated responsible person
•One of the strictest data protection laws globally alongside GDPR

Compare with Other Jurisdictions

Law	Deadline	Method	Extension
🇨🇳 China PIPL	30 days	calendar days	+30 days
🇪🇺 EU GDPR	1 months	calendar months	+2 months
🇬🇧 UK GDPR	1 months	calendar months	+2 months
🇺🇸 CCPA	45 days	calendar days	+45 days