An overview of the Chinese cybersecurity law with high-level discussions of the regulators, cybersecurity risk classification, critical information infrastructure (CII), the protection of personal information and important data, data export, security of network products and services, as well as data breach notification. The Note also briefly introduces the enforcement actions by regulators.