Share on LinkedInShare on LinkedIn

ARTICLE · 18 JULY 2025

Market Intelligence Thought Leadership Award Winner

CAC Reaffirms Identification Rules For Important Data, Personal Information Protection Compliance Audit Officially Implemented

On May 30, CAC conducted a Q&A session regarding cross-border data transfer security management policies, clarifying the identification and reporting process for important data.

ChinaPrivacy
  • Cyberspace Administration of China (CAC) has reaffirmed that companies are required to identify and report important data, as well as provide such data with heightened protection or submit it for a security assessment prior to overseas transfer, only when the relevant authorities publish specific industry or sector-related reporting rules, or explicitly inform them of the need for identification and reporting.
  • The Administrative Measures for Personal Information Protection Compliance Audit came into effect on May 1. On May 26, National Technical Committee 260 on Cyberspace of Standardization Administration (TC260) released two related guidelines to provide guidance for enterprises and professional institutions to implement the regulations.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from