Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 11 AUGUST 2022

China Issues Security Assessment Measures Of Data Cross-border Transfer

Sheppard
Sheppard
Contributor
Sheppard

Sheppard

Businesses turn to Sheppard to deliver sophisticated counsel to help clients move ahead. With more...

View firm profile
Explore more from Sheppard

On July 7, 2022, the Cyberspace Administration of China ("CAC") released the Security Assessment Measures of Cross-border Data Transfer ( the "Measures") which will be effective from September 1, 2022.

ChinaTechnology
Ruiqi Guo
Ruiqi Guo
Yuanmei Lu
Yuanmei Lu
Author LinkedIn connections

On July 7, 2022, the Cyberspace Administration of China ("CAC") released the Security Assessment Measures of Cross-border Data Transfer ( the "Measures") which will be effective from September 1, 2022. Previously on October 29, 2021, CAC has published a draft version of such Measures for public comments (which we covered in this blog post: here). In this blog post, we will present the major differences between this final version of the Measures and the prior draft version.

1. Triggering Scenarios

Article 4 of the Measures, which describes the scenarios under which data cross-border transfer will trigger governmental security assessment, has been updated. The final version provides the following four scenarios (we have underlined herein the provisions where updates have been made):

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

算力中心的MaaS服务合规进阶：境内建设、跨境输出与智能体交付的法律审视

随着我国大力兴建“东数西算”工程与构建全国一体化算力网，人工智能算力中心已从传统的机柜租赁业务为核心体现的互联网数据中心（IDC）逐步演变为集算力服务、跨境技术输出与智能化工具交付于一体的复合业务载体。除了适用互联网数据中心所适用的电信业务准入、节能审查与网络安
ChinaTechnology
AnJie Broad Law Firm
AnJie Broad Law Firm
Article

FDA Balances Peptide Policy With Enforcement Against Unlawful Peptide Sellers

Over the past year, industry has had a front row seat as the Food and Drug Administration (“FDA” or the “Agency”) decides just how much leeway it wants to afford the manufacture, marketing, and sale of peptide products, and just where it wants to draw the line. Despite the recent decision of FDA’s Pharmacy Compounding Advisory Committee (“PCAC”) to recommend a number of peptides for inclusion on the 503A bulks list process — a move that represents a potentially more permissive stance toward peptide regulation, at least in terms of what can and cannot be compounded under 503A...
United StatesFood, Drugs, Healthcare, Life Sciences
Sheppard
Sheppard
Article

OCC Issues Examiner Framework For Banks’ Use Of Artificial Intelligence

The Office of the Comptroller of the Currency has released a new framework for evaluating banks' deployment of artificial intelligence and agentic AI systems in their business operations. This guidance establishes how examiners will assess AI through existing risk management disciplines rather than creating separate regulatory requirements, with review intensity scaled to each use case's potential consequences and level of human oversight.
United StatesFinance and Banking
Sheppard
Sheppard
Article

The Ninth Circuit Affirms Dismissal Of DMCA CMI Removal Claim Against AI Code Generator – Output Is A New Work Not A Copy Of Training Data

There was a significant ruling in the Doe v. Github case involving training of AI code generator models on open source. The United States Court of Appeals for The Ninth Circuit affirmed the district court ruling dismissing part of an action brought under the Digital Millennium Copyright Act (“DMCA”) by programmers against GitHub, Inc., and other defendants. The issues centered on whether defendants removed copyright management information (CMI) from content used to train the AI code generator models.
United StatesIntellectual Property
Sheppard
Sheppard
Article

Massachusetts Issues Guidance On Data Center Development Under Executive Order 658

Massachusetts Governor Maura Healey has issued Executive Order 658, establishing comprehensive permitting and regulatory standards for data centers exceeding 25 MW of peak electricity demand. The Order mandates community benefits agreements, clean energy procurement protocols, and coordination across multiple state agencies to ensure responsible development that protects ratepayers, communities, and the environment. This action positions Massachusetts alongside other states implementing stricter oversight o
United StatesEnergy and Natural Resources
Sheppard
Sheppard