10 Must-See FAQ Regarding Security Assessment For Outbound Data Transfer

Acting as the most important implementation rule of the Personal Information Protection Law by far, the Security Assessment Measures for Outbound Data Transfers ("Measures") came into force on September 1, 2022. Article 20 of the Measures provides a six-month grace period to enterprises that have already conducted outbound data transfer activities, that is, the relevant enterprises shall complete the rectification before March 1, 2023 (the "Deadline"). Enterprises whose outbound data transfers have not yet triggered the mandatory declaration may also choose to declare security assessment at their own discretion. Considering that the Deadline will soon lapse, we have selected and answered 10 popular questions, taking into account the most confusing topics under the assessment work together with some of our hands-on experience. We hope this Q&A session will clear some doubts and help interested enterprises to keep abreast of the latest development of outbound data