China personal information protection signals from the CAC’s January 2026 Q&A, covering sensitive data, facial recognition, and DPO.