The Cyberspace Administration of China recently published the “Draft Measures on Security Assessment of Cross-Border Data Transfer” for public comment, which outlines the requirements for security assessments on cross-border data transfers. The CAC had released previous draft measures specifying the “Security Assessment” requirements and procedures formulated based on the Cybersecurity Law that went into effect in 2017. However, the latest Draft Measures further refine the implementation of the “Security Assessment” requirements in line with the recently promulgated Data Security Law and Personal Information Protection Law. Once the latest Draft Measures are approved, they will replace all previous draft measures relating to security assessments of cross-border data transfers.
