On September 28, 2023, the Cybersecurity Administration of China (the “CAC”) published a set of draft Provisions on Regulating and Promoting Cross-border Data Transfer (the “Draft Rules”) to solicit public comments. It has not been publicly announced when the Draft Rules will come into effect. Some legal practitioners speculate that they would take effect before the expiration of the grace period for filing the standard contracts as stipulated in Measures on the Standard Contract for Cross-Border Transfer of Personal Information[i]. However, these remain speculations and are not confirmed by the authorities in any official announcement.Continue Reading China Released Draft Rules Regulating and Promoting Cross-Border Data Transfer
According to the State Council’s Institutional Reform Plan released on March 7, 2023, the State Council will establish a National Bureau of Data (“NBD”), and it will be administrated by the National Development and Reform Commission (“NDRC”). Pursuant to the announced responsibilities, the NBD will be in charge of “coordinating the construction of data infrastructure, integrating and sharing data resources, and promoting the planning and development of digital China, digital economy, and digital society.”Continue Reading China to Establish National Bureau of Data
China’s Cybersecurity Law (the “Cybersecurity Law”) took effect on June 1, 2017. The Cybersecurity Law consists of 79 articles in total. According to Article 2 thereof, the Cybersecurity Law would apply to the construction, operation, maintenance and use of cyberspace within the territory of China, as well as to the supervision and administration of cybersecurity within the territory of China. This blog post will discuss those provisions of the Cybersecurity Law that would be most relevant to the protection of personal information. Any company which collects, stores, or processes personal information within the territory of China may find it useful to get familiar with such provisions.
Continue Reading Cross-Border Transfer of Personal Information under China’s Cybersecurity Law
Recently, thirteen relevant Chinese government agencies (e.g. Cyberspace Administration of China, National Development and Reform Commission of China, China Securities Regulatory Commission, etc.) jointly released amended Cybersecurity Review Measures (the “New Measures”) to amend and supersede the prior version of such measures issued on April 13, 2020. The New Measures will become effective on February 15, 2022.
Continue Reading China Issued Amended Cybersecurity Review Measures