China: Closed consultation on CAC Provisions on Standard Contracts for Exporting Personal Information Abroad

On 29 July 2022, the Cyberspace Administration of China (CAC) closed the public consultation on its draft Provisions on Standard Contracts for Exporting Personal Information Abroad. The Provisions outline obligations regarding the transfer of personal information outside of China, to ensure compliance with the Personal Information Protection Law. The Provisions would regulate contracts between processors of personal information and foreign recipients, outlining the information which must be detailed in standard contracts. Standard contracts could be used by processors of non-critical information of fewer than one million people, which have only transferred a certain amount of data (data of less than 100'000 total people or sensitive data of less than 10'000 people). Furthermore, processors would have to conduct a data protection impact assessment before transferring the information.