https://www.linkedin.com/pulse/chinas-draft-personal-information-protection-law-13-zanfir-fortuna/
includes provisions for DPIA (Data Protection Impact Assessment)
Also full translation of the draft at:
https://www.newamerica.org/cybersecurity-initiative/digichina/blog/chinas-draft-personal-information-protection-law-full-translation/