On 30 May 2023, the Cyberspace Administration of China (CAC) issued the “Guidelines for the Filing of Standard Contracts for the Outbound Transfer of Personal Information (First Edition)” (個人信息出境標準合同備案指南(第一版)), providing specific requirements for the methods, procedures, and materials for filing standard contracts for the outbound transfer of personal information.
Under Chinese law, when personal information processors provide personal information to overseas recipients through standard contracts for the overseas transfer of personal information with overseas recipients, they shall file with the cyberspace administration of the province where they are located (“local regulator”) in accordance with the “Measures for the Filing of Standard Contracts for the Outbound Transfer of Personal Information” (個人信息出境標準合同辦法).
When applying for the filing of standard contracts, personal information processors shall also submit the “Personal Information Protection Impact Assessment Report” (個人信息保護影響評估報告) in addition to standard contracts.
Upon receiving and reviewing the material, local regulators will notify the personal information processors of the filing results, which may be approved or rejected.
Contributors: CJO Staff Contributors Team
