Updates On Outbound Data Transfers

On July 7, 2022, China's Cybersecurity Administration (CAC) released long-waited regulations for the management of cross-border data transfers, in the form of the Measures for the Security Assessment of Outbound Data Transfers (the "Measures"), which will come into effect on September 1. These Measures, along with the other rules for cross-border transfers released around the same time (see below) will affect all parties involved in processing Chinese-origin data, include advertisers based entirely outside of China who may utilize local ad monitoring to track the performance of ads placed in China or targeting Chinese individuals.

The other related draft regulation and guideline released around the same time include the draft Provisions on the Standard Contract for Outbound Cross-border Transfer of Personal Information (issued June 30, 2022 by the CAC) and the Network Security Standard Implementing Guidance – Accreditation Technical Specification for Cross-border