China: Cross-border data transfer regulation in Administrative Measures for Personal Information Protection Compliance Audit

Progress

Current status
in grace period
01 May 2025 in force
12 Feb 2025 in grace period
20 May 2024 adopted
02 Sep 2023 processing consultation
03 Aug 2023 in consultation

Scope

Implementers
China
Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
other regulatory body
Implementation Level
national

Timeline of events

01 May 2025
in force

Cyberspace Administration's Measures for Administration of Compliance Audits on Personal Information Protection including cross-border data transfer regulation enter into force

On 1 May 2025, the Cyberspace Administration of China (CAC)’s Measures for the Administration of Compliance Audits on Personal Information Protection enter into force. The measures establish a framework for auditing personal information processing a…

Source
Event type order
Action type implementation
Government branch executive
Government body other regulatory body
12 Feb 2025
in grace period

Cyberspace Administration released Measures for Administration of Compliance Audits on Personal Information Protection including cross-border data transfer regulation

On 12 February 2025, the Cyberspace Administration of China (CAC) released the Measures for the Administration of Compliance Audits on Personal Information Protection. The measures establish a framework for auditing personal information processing a…

Source
Event type order
Action type in force with grace period
Government branch executive
Government body other regulatory body
20 May 2024
adopted

Cyberspace Administration adopted Measures for Administration of Compliance Audits on Personal Information Protection including cross-border data transfer regulation

On 20 May 2024, the Cyberspace Administration of China (CAC) adopted the Measures for the Administration of Compliance Audits on Personal Information Protection. The measures establish a framework for auditing personal information processing activit…

Source
Event type order
Action type adoption
Government branch executive
Government body other regulatory body
02 Sep 2023
processing consultation

Closed consultation on Administrative Measures for Personal Information Protection Compliance Audit including cross-border data transfer measures

On 2 September 2023, the Cyberspace Administration of China (CAC) closed its consultation on the draft Administrative Measures for Personal Information Protection Compliance Audit. According to the Measures, service providers processing personal inf…

Source
Event type order
Action type consultation closed
Government branch executive
Government body other regulatory body
03 Aug 2023
in consultation

Opened consultation on Administrative Measures for Personal Information Protection Compliance Audit including cross-border data transfer measures

On 3 August 2023, the Cyberspace Administration of China (CAC) opened a consultation on the draft Administrative Measures for Personal Information Protection Compliance Audit until 2 September 2023. According to the Measures, service providers proce…

Source
Event type order
Action type consultation opened
Government branch executive
Government body other regulatory body

We use cookies and other technologies to perform analytics on our website. By opting in, you consent to the use by us and our third-party partners of cookies and data gathered from your use of our platform. See our Privacy Policy to learn more about the use of data and your rights.