- In August 2026 Guangzhou, Shenzhen and the Guangdong-Macao In-Depth Cooperation Zone in Hengqin were selected as the first batch of national pilot zones for international cooperation in the data sector, supported by the National Data Administration.
2026年8月,在国家数据局支持下,广州、深圳及横琴粤澳深度合作区入选国家数据领域国际合作首批试点。
- The pilot designates Hengqin to build an international data hub focused on Portuguese- and Spanish-speaking countries via Brazil, leveraging the “Macao + Hengqin” combination.
试点方案赋予横琴立足”澳门+横琴”独特优势,以巴西为突破口、重点面向葡语、西语系国家打造数据领域国际合作新枢纽、新通道。
- Hengqin completed its first filing case under the data-export negative list in mid-2026: Macao International Airport reported a cross-border data transmission under the “use first, report later” mechanism.
2026年年中,横琴完成首单数据出境负面清单报告案例:澳门国际机场依据”先用后报”机制申报跨境数据传输。
- Guangdong’s FTZ data-export negative list (2025 version), covering intelligent equipment manufacturing and personal-credit services, was registered with the CAC and the National Data Administration in May 2026.
广东自贸试验区数据出境负面清单(2025版)聚焦智能装备制造和个人征信服务业两大领域,2026年5月经国家网信办、国家数据局审核备案发布。
- Under the “use first, report later” mechanism, enterprises self-assess against the list, transmit data promptly, and file a report within 15 working days; qualified transmissions are exempt from security assessment and standard-contract filing.
“先用后报”机制下,企业对照清单自主研判、便捷出境,事后15个工作日内报告;符合清单条件的数据免于安全评估、免于标准合同备案。
- For foreign-invested enterprises in Guangdong, the pilot and negative list reduce the compliance cost of cross-border data flows for manufacturing, logistics, finance and R&D operations.
对广东外资企业而言,该试点与负面清单降低了制造、物流、金融与研发运营跨境数据流动的合规成本。
Guangdong’s Data-Export Negative List and the First National Data Pilot: Compliance Relief for FIEs | 广东数据出境负面清单与首批国家数据试点:外资企业的合规减负
Why this matters now
Cross-border data flows have been one of the hardest compliance areas for foreign-invested enterprises (FIEs) in China, caught between data-security rules and genuine business needs to transmit HR, manufacturing, logistics and financial data overseas. Two developments in 2026 materially ease that pressure in the country’s most trade-intensive province. First, in May 2026, Guangdong published the data-export management list (negative list, 2025 version) for its pilot free-trade zones, after registration with the Cyberspace Administration of China and the National Data Administration. Second, in August 2026, Guangzhou, Shenzhen and the Hengqin cooperation zone were selected as the first batch of national pilot zones for international cooperation in the data sector. The combination gives FIEs in Guangdong a compliance channel that is substantially cheaper than the default security-assessment route.
How the negative list works
The negative-list approach inverts the default. Under the cross-border data rules, data transfers generally require one of three routes: a data-export security assessment, a standard contract, or certification. A negative list changes the equation: data within the listed scope — as determined by the enterprise’s own assessment against clear data categories — can flow abroad without the assessment or standard-contract burden, subject to filing. Guangdong’s list covers two focus areas, intelligent equipment manufacturing and personal-credit services, spanning important data and personal information across 7 business scenarios and 67 data items. The Hengqin implementing guide issued on 5 June 2026 codifies the “use first, report later” mechanics: an enterprise evaluates its data against the list, transmits compliant data promptly, and files a report within 15 working days. At a policy briefing in Hengqin on 2 July 2026, officials confirmed that data within the list is exempt from security assessment and standard-contract filing.
The international cooperation pilot
The August 2026 selection of Guangzhou, Shenzhen and Hengqin as national data international-cooperation pilots deepens the infrastructure behind the list. The pilot scheme assigns differentiated roles: Guangzhou builds a “facilities-rules-carriers-ecosystem” system; Shenzhen leverages Qianhai to expand cooperation with Singapore, ASEAN and Belt-and-Road countries; Hengqin focuses on the “Macao + Hengqin” advantage and, via Brazil, the Portuguese- and Spanish-speaking world. For FIEs, the pilot matters because it signals sustained official investment in the enabling layer — cross-border data verification platforms, research data networks and a data cross-border service centre that has already advised more than 70 companies — making the negative-list channel more usable over time.
Practical steps for FIEs in Guangdong
- Determine whether your data falls in the list. Map the data your entity transmits overseas — production parameters, equipment data, credit data, HR records — and check each category against the Guangdong negative list.
- Choose the compliant route. Where data is within the list, use the “use first, report later” mechanism with the 15-working-day filing; where it is outside, fall back to security assessment, standard contract or certification as applicable.
- Build self-assessment capacity. Document how your team classifies data and reaches its conclusion, because the mechanism is self-assessment-based and subject to ex-post supervision.
- Leverage the Hengqin/Nansha service layer. Use the data cross-border service centre and the implementing guides (Hengqin and Nansha have both issued them) for questions and procedural support.
- Watch for industry lists. Other FTZs and pilot areas are issuing negative lists across industries; if your group operates in automotive, healthcare, aviation or other covered sectors, track the applicable provincial list.
- Coordinate data, legal and IT. Negative-list compliance touches data classification, security, contracts and systems; run it as a cross-functional programme rather than a compliance checkbox.
Risks and compliance notes
The negative list is a narrowing of obligations, not an exemption from the data-security legal framework. Data outside the list still requires the full route; misclassification by the enterprise can create real liability. The “report later” obligation must be met within 15 working days, and the authorities retain ex-post supervision. FIEs should also remember that personal information crosses the border under the PIPL framework as well — the negative list does not override the PIPL’s consent and minimisation principles, it addresses the administrative route. Finally, because the list is Guangdong-specific, an FIE with operations in multiple provinces should verify the applicable list for each location rather than assuming national application.
广东数据出境负面清单与首批国家数据试点:外资企业的合规减负
为什么当下重要
跨境数据流动一直是在华外资企业最难处理的合规领域之一——一边是数据安全规则,一边是向境外传输人力资源、制造、物流与财务数据的真实业务需求。2026年的两项进展在中国贸易最密集的省份实质性地缓解了这一压力。第一,2026年5月,广东在其自贸试验区发布数据出境管理清单(负面清单,2025版),经国家网信办与国家数据局审核备案。第二,2026年8月,广州、深圳及横琴合作区入选国家数据领域国际合作首批试点。二者结合,为广东外资企业提供了一条在成本上远低于默认安全评估路径的合规通道。
负面清单如何运作
负面清单方法反转了默认逻辑。在跨境数据规则下,数据传输通常需要三条路径之一:数据出境安全评估、标准合同或认证。负面清单改变了等式:清单范围内的数据——由企业对照清晰的数据类别自行判定——可以在不承担安全评估或标准合同负担的情况下出境,仅需备案。广东清单覆盖两大重点领域,智能装备制造与个人征信服务,涵盖重要数据与个人信息,涉及7个业务场景、67个数据项。2026年6月5日发布的横琴实施指南将”先用后报”机制成文化:企业对照清单研判数据、合规数据及时出境、事后15个工作日内报告。2026年7月2日横琴政策宣讲会上,官方确认清单内数据免于安全评估与标准合同备案。
国际合作试点
2026年8月广州、深圳与横琴入选国家数据领域国际合作首批试点,为清单背后的基础设施再添砖瓦。试点方案赋予差异化角色:广州构建”设施—规则—载体—生态”四位一体体系;深圳依托前海拓展与新加坡、东盟及共建”一带一路”国家合作;横琴立足”澳门+横琴”优势、经巴西面向葡语西语世界。对外资企业而言,该试点意味着官方对该使能层的持续投入——跨境数据验证平台、跨境科研数据网络,以及已服务超70家企业的数据跨境服务中心——使负面清单通道随时间推移更可用。
广东外资企业的操作步骤
- 判定数据是否落入清单。 梳理本实体向境外传输的数据——生产参数、设备数据、征信数据、HR记录——并逐类对照广东负面清单。
- 选择合规路径。 清单内数据走”先用后报”机制、15个工作日备案;清单外数据按适用情形走安全评估、标准合同或认证。
- 建设自评估能力。 文件化团队如何分类数据并得出结论,因为该机制以自评估为基础、接受事后监管。
- 利用横琴/南沙服务层。 就疑问与程序支持,使用数据跨境服务中心及实施指南(横琴、南沙均已发布)。
- 关注行业清单。 其他自贸试验区与试点地区正跨行业发布负面清单;若贵集团涉足汽车、医药、民航等覆盖行业,跟踪适用的省级清单。
- 协同数据、法务与IT。 负面清单合规涉及数据分类、安全、合同与系统;作为跨职能项目运行,而非合规勾选项。
风险与合规提示
负面清单收窄的是义务范围,不是豁免数据安全法律框架。清单外数据仍须走完整路径;企业分类错误可能产生真实责任。”事后报告”义务必须在15个工作日内履行,监管部门保留事后监督。外资企业还应记住,个人信息依PIPL框架出境——负面清单不替代PIPL的同意与最小化原则,它处理的是行政路径。最后,由于清单为广东专属,在多省运营的外资企业应核验各地适用清单,而非假设全国统一适用。
Sources
- 横琴粤澳深度合作区官网《横琴入选国家数据领域国际合作首批试点》(2026-08,广州、深圳及横琴入选;广东负面清单2025版5月经国家网信办、国家数据局审核备案;横琴6月5日发布实施指南):<https://www.hengqin.gov.cn/macao_zh_hans/hzqgl/dtyw/dtxx/content/post_3932986.html>
- 横琴粤澳深度合作区官网《横琴入选国家数据领域国际合作首批试点 数字贸易国际枢纽港建设迈上新台阶》(含”先用后报”、中巴数字化转型中心、数据跨境服务中心服务70余家企业):<https://www.hengqin.gov.cn/stats/xxgg/xxdt/content/post_3933281.html>
- 广州市人民政府门户网站《广州出台国家服务贸易创新发展示范区建设方案》(含广东自贸试验区数据出境负面清单正式实施、南沙7月发布实施指南、清单外数据免审、卓志跨境首单落地):<https://www.gz.gov.cn/ysgz/xwdt/ysdt/content/post_10968197.html>
- 中国经济网《数据跨境便利化快马加鞭》(2026-08-18,天津、海南、上海、浙江等自贸区相继发布负面清单;广东清单7场景67数据项):<https://www.ce.cn/cysc/newmain//yc/jsxw/202608/t20260818_3152520.shtml>
