China's laws protecting personal data were recently updated
with the announcement of two new Standard Contractual Clauses
(SCCs). These are known as the SCC Measures and SCC Guidelines, and
they are part of China's efforts to protect privacy along the
lines of the EU's GDPR (General Data Protection
Regulation).
SCC Measures
On 24 February 2023, the National Internet Information Office of
China issued the Measures for Standard Contracts for the Exit of
Personal Information (SCC Measures). These regulations conform to
Article 38 of the Personal Information Protection Law (PIPL).
The SCC Measures govern the cross-border transfer of personal
information from China to overseas recipients, specifying the
terms, conditions, and filing requirements for standard contracts.
The new rules come into effect on 1 June 2023 with a six-month
grace period, meaning companies have until 30 November 2023 to
ensure their data-transfer activities comply.
