EXIN PIPL Foundation case studies

EXIN PIPL Foundation · Put your knowledge to work in context.

The EXIN PIPL Foundation credential is intended to certify foundational knowledge of the Personal Information Protection Law of the People's Republic of China (PIPL), the comprehensive statute governing how personal information is collected, stored, used, shared and transferred. Candidates typically include privacy and compliance officers, legal counsel, data protection officers, IT and security managers, HR and marketing staff handling personal data of individuals in China, and consultants advising organisations on cross-border data flows. The EXIN PIPL Foundation case studies are 5 cases and about 2,776 words.

German fitness app with Chinese users and a Shanghai subsidiary

NordFit GmbH is a German fitness-app company with no legal entity in mainland China. Its app is offered in Simplified Chinese, priced in RMB, supports WeChat login, and has 180,000 monthly active users in mainland China.

572 words, about 3 min 2

Dental chain bundling consent, facial recognition and a 15-year-old patient

Hangzhou-based dental chain BrightSmile operates 12 clinics and an app with 400,000 registered patients. New patient registration requires checking one box that says 'I agree to the Privacy Policy and to receive marketing, research and third-party offers.' Facial recognition is used at clinic entrances; the app collects ID numbers, dental X-rays and payment records.

526 words, about 3 min 3

E-commerce access, deletion, pricing algorithm and a deceased account

Chen uses HuiBuy, an e-commerce app. He requests a copy of all his personal information, deletion of two years of browsing and search history, and an explanation of why the app's automated pricing tool charged him 12% more than a friend for the same headphones.

612 words, about 3 min 4

Consumer lender's breach, credit-scoring DPIA and offshore cloud

Shanghai-based consumer lender QuickCredit has 2.3 million borrowers. It stores loan applications, ID numbers, income statements and bank account details on a Singapore cloud.

506 words, about 3 min 5

Large video platform dissolving its external privacy oversight body

WaveVideo is a short-video platform with 80 million daily active users in China. Its board wants to dissolve the Privacy Oversight Committee, a body of five external members that reviews algorithm changes, to cut costs.

560 words, about 3 min