Cyberspace Administration of China - Measures for Standard
Contracts for Cross-border Transfer of Personal Information
Issued by: Order No. 13 of the Cyberspace Administration of
China
Date: February 22, 2023
The transfer of personal data out of China is permitted in
certain specific circumstances, one of which is pursuant to a
Standard Contract. The 'Measures for Standard Contracts for
Cross-border Transfer of Personal Information' recently issued
by the Cyberspace Administration of China (CAC), and due to take
effect on 1 June 2023, contain a template Standard Contract and
detailed information as to how these transfers can be made.
According to the provisions, operators of non-critical
information infrastructures, i.e. those not operating a key network
or information system where the loss or leakage of data may
seriously endanger national security or social stability, may
transfer personal data out of China pursuant to a Standard
Contract, provided they meet
