PIPL Compliance

What is PIPL?

The Personal Information Protection Law (PIPL) is China's comprehensive data protection law that came into effect on November 1, 2021. It establishes rules for the collection, storage, use, processing, transmission, provision, and disclosure of personal information. Utopia Audio is committed to full compliance with PIPL requirements for all users in China.

Your Rights Under PIPL

As a resident of China, you have the following rights regarding your personal information:

Legal Basis for Processing

Under PIPL, we process your personal information based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing purposes
• Contract Performance: When necessary to conclude or perform a contract with you
• Legal Duties: When necessary to fulfill our legal duties and responsibilities
• Public Interest: When necessary for public health emergencies or public interest
• Legitimate Business: When reasonably necessary for conducting legitimate business activities

Sensitive Personal Information

PIPL provides enhanced protection for sensitive personal information. We implement additional safeguards when processing:

• Biometric data (voice patterns used for voice-matching)
• Religious beliefs or specific identities
• Health information
• Financial account information
• Location tracking data
• Personal information of minors under 14 years old

For sensitive personal information, we obtain separate explicit consent and clearly explain the purpose and necessity of processing.

Cross-Border Data Transfers

When transferring personal information outside of China, we comply with PIPL requirements by:

• Obtaining your separate consent for cross-border transfers
• Conducting security assessments when required
• Entering into standard contracts with overseas recipients
• Ensuring overseas recipients provide equivalent protection levels
• Maintaining records of cross-border data transfers

Data Localization

In compliance with PIPL and related regulations, we store personal information of China users on servers located within mainland China where required, ensuring data localization requirements are met for critical information infrastructure operators.

Data Protection Measures

We implement comprehensive security measures as required by PIPL:

• Encryption of personal information in transit and at rest
• Access control and authentication systems
• Regular security audits and risk assessments
• Employee training on data protection
• Incident response and breach notification procedures
• Personal information protection impact assessments (PIPIA)

Exercising Your Rights

To exercise any of your PIPL rights, please contact our Personal Information Protection team:

Regulatory Authority

If you believe your personal information rights have been violated, you may file a complaint with the Cyberspace Administration of China (CAC) or relevant local authorities responsible for personal information protection.