April 2024 - Update on the new regulations of data transfer relating to personal information in China
Pursuant to the PRC Personal Information Protection Law (PIPL), if a personal information handler needs to transfer personal information outside of China, it shall fulfill at least one of the following pre-requisites:
- Perform a self-assessment on data security of the outbound data transfer and submit to Cyberspace Administration for registration and review.
- Obtain a certification issued by a specialized agency on protection of personal information in accordance with the provisions of the Cyberspace Administration.
- Sign a Standard Contract, following the template released by the Cyberspace Administration, with the overseas recipient and submit for registration.
- Perform a self-assessment on data security of the outbound data transfer and submit to Cyberspace Administration for registration and review.
- Obtain a certification issued by a specialized agency on protection of personal information in accordance with the provisions of the Cyberspace Administration.
- Sign a Standard Contract, following the template released by the Cyberspace Administration, with the overseas recipient and submit for registration.