Last year September, the Cybersecurity Administration of China
(CAC) issued draft rules that proposed to exempt many companies
from burdensome filing requirements with regard to the export of
personal information. Last Friday, the CAC finally published the
Provisions on Promoting and Regulating Cross-border Data
Flow, which became effective immediately.
The Provisions deal with a number of topics, including
the export of general data: security assessments for the export of
important data are only required if relevant departments or regions
have determined such data as important data. Moreover, CAC filings
and security assessments are not required for non-personal data
collected and generated in international trade, cross-border
transport, academic cooperation, transactional manufacturing and
marketing.
