China: Adopted Cybersecurity standard practice guidelines - Protection requirements for cross-border processing of personal information in the Guangdong-Hong Kong-Macao Greater Bay Area

On 21 November 2024, China's National Information Security Standardisation Technical Committee (TC260) adopted the cybersecurity standard practice guidelines - protection requirements for cross-border processing of personal information in the Guangdong-Hong Kong-Macao Greater Bay Area. The guidelines set out principles and requirements for personal information processors or recipients within the Guangdong-Hong Kong-Macao Greater Bay Area when conducting cross-border flows of personal data.