---
title: "PIPIA"
description: "China's personal information protection impact assessment under PIPL Articles 55 and 56, required in advance for sensitive data, automated decision-making, entrusted processing and cross-border…"
canonical: https://aigovernanceengineer.com/glossary/pipia
author: "Jorge García Aibar"
license: "CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/)"
doi: https://doi.org/10.5281/zenodo.22956197
version: "0.5.0"
updated: 2026-09-24
---

# PIPIA

China's personal information protection impact assessment under PIPL Articles 55 and 56, required in advance for sensitive data, automated decision-making, entrusted processing and cross-border provision, with the report kept for at least three years [1].

- Developed in: [ch. 19, Brazil and China](https://aigovernanceengineer.com/bok/privacy-and-ai#brazil-and-china)
- Chapters: [ch. 19, Privacy & AI](https://aigovernanceengineer.com/bok/privacy-and-ai)
- Contrast with: [DPIA](https://aigovernanceengineer.com/glossary/dpia)
- In the glossary chapter: https://aigovernanceengineer.com/bok/glossary#t-pipia

## Sources

[1] Personal Information Protection Law of the People's Republic of China (Arts. 55 and 56 personal information protection impact assessment, records kept three years; official English translation). National People's Congress. 2021-08-20. http://en.npc.gov.cn.cdurl.cn/2021-12/29/c_694559.htm (verified: primary)