CAC Revises Cross-Border Data Transfer Measures To Facilitate Data Export From Mainland China

On 22 March 2024, the Cyberspace Administration of China (CAC) officially enacted the long-awaited Provisions on Facilitating and Regulating Cross-border Data Flows (Provisions), which became effective on the same date. The Provisions relax the data export requirements by introducing modifications and exemptions to the three mechanisms for cross-border data transfer, namely (i) CAC security assessment; (ii) China's standard contract for outbound cross-border transfer of personal information (Standard Contract) and (iii) personal information protection certification (Certification) (collectively Cross-border Data Transfer Mechanisms). A draft of the Provisions was released on 28 September 2023 for public consultation. Please refer to our previous article China relaxes measures on cross-border data transfers from China | Data notes (hsfnotes.com)).