STEAMSHIP MUTUAL UNDERWRITING ASSOCIATION LIMITED Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and Prudential Regulation Authority (Registered in England and Wales – Registration number 105461. PRA and FCA registration number 202548) MANAGERS: STEAMSHIP P&I MANAGEMENT LLP SPIM is an appointed representative of Steamship Insurance Management Services Limited which is authorised and regulated by the Financial Conduct Authority (Registered in England and Wales – Registration Number OC376859. FCA registration number 597046) Chinese Personal Information Protection Law (PIPL) October 2022 Dear Members IMPORTANT NOTE: PIPL is China’s comprehensive law that sets detailed rules with respect to data privacy and the protection and applies to the processing of personal information and sensitive personal information within the People’s Republic of China (PRC). PIPL came into effect on 1 November 2021. The PIPL defines ‘personal information’ as “all information related to identified or identifiable natural persons” but excludes information which is anonymised (information that cannot be used to identify a specific natural person and cannot be restored after being so anonymised). Please see below the implications that this law may have on shipowners, managers, and their correspondents in the PRC. The FAQs are intended to provide guidance and should not be regarded as providing definitive legal advice. 1. What are shipowners’ and managers’ obligations under PIPL? Shipowners and managers must ensure that they have adequate consent from seafarers so they can contact next of kin, process their data and transfer it to their correspondents and P&I clubs in the event of crew illness or injury claims arising in the PRC (regardless of the seafarer’s nationality). Crew contracts may need to be amended to include the adequate level of consent required. 2. What are correspondents’ obligations under PIPL? Correspondents need to obtain seafarers’ consent when dealing with illness or injury claims arising in the PRC. This consent is required to contact next of kin, process their data and transfer it to their correspondents and P&I clubs. Key points to note are:  In an emergency, PIPL states that that consent must be obtained ‘as soon as practicable’, meaning as soon as both practical and possible in the circumstances.  If the seafarer is deceased or cannot provide their consent, consent will need to be obtained from the seafarer’s next of kin.  Correspondents located in the PRC may need to enter into the relevant data transfer agreement with overseas organisations that they transfer personal information to, for example P&I clubs. 3. What are the requirements of the term ‘consent’ under PIPL? Adequate consent must confirm the relevant shipowner, manager, or correspondent’s authorisation to: International Group FAQs STEAMSHIP MUTUAL UNDERWRITING ASSOCIATION LIMITED Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and Prudential Regulation Authority (Registered in England and Wales – Registration number 105461. PRA and FCA registration number 202548) MANAGERS: STEAMSHIP P&I MANAGEMENT LLP SPIM is an appointed representative of Steamship Insurance Management Services Limited which is authorised and regulated by the Financial Conduct Authority (Registered in England and Wales – Registration Number OC376859. FCA registration number 597046) 2 1. Process the relevant s