China’s Cybersecurity laws take effect June 1 2017. These laws apply to “network operators” which is a broad term. Much like US laws, these laws regulate the collection and handling of personal information and contain industry specific rules. Additionally, China's cyber laws stress the protection of individual privacy (as opposed to simply protection of data) and also require that sensitive PII be stored domestically. Penalties for violations include monetary fines, license suspensions and termination of business activities. 

https://assets.kpmg.com/content/dam/kpmg/cn/pdf/en/2017/02/overview-of-cybersecurity-law.pdf