A key deadline is approaching; have you obtained approval from
the Chinese government for cross-border transfer of personal
data?
The Measures for Cross-border Data Transfer Assessment
("Measures") that took effect on 1 September 2022 give
data exporters only 6 months to get their house in order: Companies
that transfer large volumes of personal information outside of
China must have completed a security assessment by 28
February 2023. The assessment process is complicated and
time-consuming, and affects two types of international
companies:
- Multinationals with subsidiaries in China, who transfer large
volumes of personal information from their subsidiary to HQ or
other international affiliates;