China issues final version of cross-border personal information transfer standard contract

29 March 2023

On 24 February 2023, the Cyberspace Administration of China (“CAC”) published the final version of the Provisions on the Standard Contract for Cross-border Personal Information Transfers (《个人信息出境标准合同办法》) (“Provisions”), including the Standard Contract for Cross-border Personal Information Transfers (“Standard Contract”), as an appendix to the Provisions, on its official website. Since the release of the Personal Information Protection Law in 2021, which requires, among others, relevant parties to enter into a standard contract formulated by CAC before transferring personal information out of China, market players have been eagerly awaiting the release of the Standard Contract. A draft of the Provisions together with a draft Standard Contract was published for comment on 30 June 2022.

The Provisions will take effect on 1 June 2023.

To read this Update, which provides an overview of the Provisions and the Standard Contract, please click here.