China introduced new rules on November 1 that restrict the extent to which internet companies can collect and store user data. Known as the personal information protection law, it is said to be among the toughest data-protection regimes in the world.