An overview of the regulatory requirements for cybersecurity and data protection in the Chinese healthcare industry. It focuses on data compliance issues that might be encountered by pharmaceutical companies and medical institutions, in particular regarding the requirements on data localisation and cross-border transfers of various types of healthcare data, including sensitive personal information (PI), human genetic resources (HGR) data, clinical trial data, medical records, and so on.