China's cybersecurity law affects organisations that deal with consumers and businesses in mainland China and will transform the way that personal information is collected, stored, used, disclosed and disposed of. Although the precise application of some provisions of the Cybersecurity Law are still subject to further clarification, certain significant trends are emerging. Some enterprises are looking for the best practice to set up internal safety management systems; some are concerned with the restrictions on their companies' China operations brought by the new law and some are following developments closely in order to know how to minimise the impact of cybersecurity threats.