Description
Updated national standards governing cross-border data transfers take effect on March 1, 2026. Data processors in China must satisfy at least one compliance pathway: passing CAC security assessment or obtaining personal information protection certification.
Requirements
- Determine applicable cross-border data transfer pathway
- Complete CAC security assessment or obtain PI protection certification
- Update data transfer impact assessments
- Review Standard Contractual Clauses for compliance
- Document cross-border data flows and compliance pathway
Applicable To
Organizations transferring personal data out of ChinaMultinational companies with China operations
Penalty Information
âš Subject to China CSL penalties including fines up to RMB 10 million and potential data transfer suspension.