An overview of the regulatory environment for cybersecurity and data protection in the Chinese healthcare industry. The Article introduces the evolving Chinese cybersecurity regime and its implications on the healthcare industry. It focuses on cybersecurity protection, data localisation, data export and other issues that pharmaceutical companies and medical institutions operating in China (or their overseas investors) need to be aware of.