For companies doing business in China, understanding data privacy and cybersecurity requirements under Chinese law is critical. But once a company is familiar with the basic legal contours, more practical concerns move to the forefront. In this article, the second in a two-part series on China’s data privacy and cybersecurity laws, we share insights from practitioners working in China on how companies can manage the practical challenges of running their businesses while staying on the right side of the law. The first article in the series explained the basic structure of the data compliance regime in China, including the criminal law, civil law, industry regulations and the draft Cybersecurity Law. See also “The Emperor Is Far Away: The Evolving Nature of Third-Party Risk in China” (Sep. 9, 2015).