Clifford Chance

China Revamps its Rules on Cross-border Data Transfer

29 March 2024

The Cyberspace Administration of China released the Provisions on Regulating and Promoting Cross-border Data Flows (the New Provisions) on 22 March 2024, together with the second edition of the Guidelines for Security Assessment Filings and the Guidelines for Filing Personal Information Export Standard Contract, each with immediate effect. The New Provisions introduce long-awaited changes to the current PRC data export regime established under the Cybersecurity Law, the Data Security Law, the Personal Information Protection Law and related secondary rules. Companies will need to reassess their PRC data arrangements against the qualitative and quantitative data transfer exemptions and the broader impact of these new developments.

Download PDF