China has passed a new privacy law aimed at protecting users’ personal data, state media reported.

The new law comes as Chinese tech firms have come under renewed scrutiny in the country, and sets rules around how companies handle users’ information. The law takes effect on November 1st.

The law—formally called the Personal Information Protection Law— was passed by China’s legislature on Friday, Reuters reported, and calls for companies to get users’ consent before collecting personal data, and has rules for how companies should ensure users’ data is protected when it’s transferred outside of China.