On February 24, 2023, the Cyberspace Administration of China
(“CAC”) officially promulgated the Standard
Contract Measures for the Export of Personal
Information (the “SCC Measures”)1,
which will come into effect on June 1, 2023. CAC eight months
earlier in June 2022 had circulated the draft Measures for public
comment. The SCC Measures have now been finalized and officially
promulgated.
Promulgation of the SCC Measures indicates that the regulatory
regime for all three channels to conduct the outbound transfer
(export) of personal information (“PI”) provided under
the Personal Information Protection
Law (“PIPL”) is largely complete and the CAC
has the legal basis to take corresponding enforcement action for
violations.