Specifications For Certification Of Personal Information Export

On April 29, 2022, the National Information Security Standardization Technical Committee issued for public comments a draft of the Technical Specifications for the Certification of Personal Information Cross-border Processing (the "Draft Specifications"). As the first official draft specifications on personal information protection certifications, the Draft Specifications are intended to refine and partially implement Article 38 of the Personal Information Protection Law (the "PIPL"), thus facilitating cross-border transfers of personal information ("PI"). In this article, we briefly analyze the key aspects of the Draft Specifications from the perspective of companies that transfer PI cross-border.