31% of China Personal Information Protection Law (PIPL) you already have
Danish Data Protection Act (Databeskyttelsesloven) already covers about 31% of China Personal Information Protection Law (PIPL), leaving
36 of 52 controls as genuinely new work.
Already covered 0
Likely covered 16
New work 36
No control in Danish Data Protection Act (Databeskyttelsesloven)
maps directly to one in China Personal Information Protection Law (PIPL). Everything counted as covered is covered because both
map to the same third standard, which is what a crosswalk is, but it is an inference rather
than a lookup.
What is genuinely new work
Nothing in Danish Data Protection Act (Databeskyttelsesloven) reaches these. This is the list to scope.
PIPL-Art14Consent Requirements
PIPL-Art15Right to Withdraw Consent
PIPL-Art16No Coerced Consent / No Service Refusal
PIPL-Art17Notice Content Before Handling
PIPL-Art21Entrusted Handling (Processors)
PIPL-Art22Transfer Due to Merger or Restructuring
PIPL-Art24Automated Decision-Making
PIPL-Art3Scope and Extraterritorial Application
PIPL-Art30Enhanced Notice for Sensitive PI
PIPL-Art38Cross-Border Transfer Legal Mechanisms
PIPL-Art4Definition of Personal Information and Handling
PIPL-Art40Data Localisation and Security Assessment for CIIOs
PIPL-Art41Foreign Authority Requests Require Approval
PIPL-Art42Blocklist of Overseas Recipients
PIPL-Art43Reciprocal Countermeasures
PIPL-Art44Right to Know and Decide
PIPL-Art45Right to Access, Copy and Portability
PIPL-Art46Right to Correction and Completion
PIPL-Art47Right to Deletion
PIPL-Art48Right to Explanation of Handling Rules
PIPL-Art49Rights of Deceased's Next of Kin
PIPL-Art50Request-Handling Mechanism and Remedy
PIPL-Art51Security Measures and Management System
PIPL-Art52Designation of a DPO
PIPL-Art53Domestic Representative for Overseas Handlers
PIPL-Art54Regular Compliance Audits
PIPL-Art55Personal Information Protection Impact Assessment
PIPL-Art56PIPIA Content and Retention
PIPL-Art57Breach Remediation and Notification
PIPL-Art58Large Platform Obligations
PIPL-Art66Administrative Penalties
PIPL-Art69Civil Liability (Fault Presumed)
PIPL-Art7Openness and Transparency
PIPL-Art70Public Interest Litigation
PIPL-Art71Public Security and Criminal Liability
Show the 16 you already have
PIPL-Art13Legal Bases for Handling
PIPL-Art19Retention Period Limitation
PIPL-Art23Provision of PI to Third Parties
PIPL-Art25Public Disclosure Prohibited Without Consent
PIPL-Art26Image Collection in Public Places
PIPL-Art27Handling Already-Disclosed PI
PIPL-Art28Sensitive PI Definition and Threshold
PIPL-Art29Separate Consent for Sensitive PI
PIPL-Art31Minors Under 14
PIPL-Art32Sectoral and Administrative Restrictions
PIPL-Art35State Organs Handling for Statutory Duties
PIPL-Art39Notice and Separate Consent for Cross-Border
PIPL-Art5Lawfulness, Good Faith, Necessity
PIPL-Art6Purpose Limitation and Minimisation
PIPL-Art8Quality of Personal Information
PIPL-Art9Security Responsibility of Handlers
How this is calculated
Already covered means a mapping runs from a control in Danish Data Protection Act (Databeskyttelsesloven) to that control. Likely
covered means no direct mapping exists but both frameworks map to the same control in a third
standard. New work means neither. We keep those separate rather than adding them into one
friendlier number, because blending them would present a two-hop inference as a verified
fact.
Coverage is not symmetric.
Run it the other way and you will get a
different number; both are correct.
From 332,959 cross-framework control
mappings across 723 frameworks, 531 of them verified against
their source documents. It does not tell you that you are compliant: a mapped control means
the two standards ask for the same thing, not that you have done it.
Try another pair ยท
Today's edition