On January 3, 2025, the Cyberspace Administration of China (the “CAC”) released the Draft Measures for Personal Information Protection Certification for Cross-Border Data Transfers (the “Draft Measures”) for public comment. Following the Implementation Rules for Personal Information Protection Certification (the “Implementation Rules”) and the Cybersecurity Standards Practice Guidelines – Security Certification Specifications for Cross-Border Processing of Personal Information V2.0 (TC260-PG-20222A) in 2022, the Draft Measures provides additional details with respect to key aspects of the certification process, including its applicability, evaluation criteria, implementation process, use of certification results, and post-certification supervision. Continue Reading Draft Measures for Personal Information Protection Certification for Cross-Border Data Transfers Released for Public Comment

中国正式发布《促进和规范数据跨境流动规定》

On March 22, 2024, nearly six months after the release of the “draft Provisions on Regulating and Promoting Cross-border Data Transfer” (the “Draft Rules”), the Cybersecurity Administration of China (the “CAC”) formally released the “Regulations on Facilitating and Regulating Cross-border Data Flow” (the “New Regulations”), which came into effect on the date of release.Continue Reading China Issues Regulations on Facilitating and Regulating Cross-Border Data Flow

In September 2022, the Cyberspace Administration of China (the “CAC”) officially enacted the Measures on Security Assessment for the Cross-border Transfer of Data (the “Measures”). Under the Measures, an entity (the “data processor”) shall conduct a security assessment if its cross-border data transfer activities involves any of the following scenarios:Continue Reading Companies in Beijing are Submitting Application Materials Relating to the Security Assessment for Cross-border Data Transfer