Hello Michelle,
I did a little searching for you, and found these links:
privacyasia.blogspot.com/http://www.asiacloudforum.com/content/data-protection-laws-ii-apac-data-privacy-laws-updateMy advice would be to look over the privacy policies of Asian companies, and see what they cover. If you don't have a specialized international legal team, you might want to contract with one.
One example of a firm like this is Bird & Bird. They offer legal consulting services around international data protection laws. I watch their website for international privacy law news, and they were recommended by Citrix during their portion of our Summit talk on European privacy laws.
http://www.twobirds.comI hope this helps!