After nearly six months of public consultation following the initial proposal by the Cyberspace Administration of China (CAC), new rules aimed at streamlining and regulating cross-border data flows have come into effect. These regulations, publicized and made effective on 22 March 2024, mirror the original proposals but offer additional relaxation in personal data exports out of China. The publication of these new rules comes half a year after the CAC’s initial introduction for public discussion. Law.com reported this development.
Alongside the new regulations, the CAC also released a publication of the Guide to the Application for Security Assessment of Data Exports (Second Edition), and the Guide to the Filing of the Standard Contract for Personal Data Exports (Second Edition). The second edition guides majorly modify the existing guides in line with the new regulations.
While detailed specifics from the initial draft regulations announcement on ‘Privacy World’ were included in the final regulations, the newly initiated rules have clearly taken steps to further ease the export of personal data from China.
The new policies mark a significant development in China’s approach to personal data exports. As the narrative unfolds, further assessment will reveal the broader implications of these revised regulations on the global stage.