An article to discuss China's draft Personal Information Protection Law, which is open for public comment until 19 November 2020. The article highlights the key elements of the draft law, including the definition of personal information, scope of application, requirements for personal information processing, cross-border transfers of personal information, rights of individuals and obligations of information processors. It highlights certain similarities and differences between the draft law and the GDPR. The article also introduces the regulatory powers and penalties on non-compliance.