2026-08-28
In August 2026 Guangzhou, Shenzhen and the Guangdong-Macao In-Depth Cooperation Zone in Hengqin were selected as the first batch of national pilot zones for international cooperation in the data...
2026-08-28
China's free-trade-zone (FTZ) data-export negative-list mechanism is moving from policy design to live, enforceable cases. 自贸试验区数据出境负面清单机制正从制度设计走向可落地的实际案例。Beijing, Hengqin (Guangdong), Chongqing and Nansha (Guangzhou) have each recorded its first negative-list data-export...
2026-08-28
The CAC "Provisions on Promoting and Regulating Cross-Border Data Flows" (CAC Decree No. 16, 22 March 2024) let free-trade zones formulate their own data-export negative lists under the national...
2026-08-28
The security assessment is the highest-threshold of China's three data-export routes and is mandatory when a Critical Information Infrastructure Operator (CIIO) exports personal information, or when any processor exports...
2026-08-28
The standard contract is the second of PIPL's three export routes: sign with the overseas recipient, then file with the provincial cyberspace administration. 标准合同是《个保法》三条出境路径中的第二条：与境外接收方签约，再向省级网信部门备案。Eligibility is fixed by volume...
2026-08-28
China's third data-export route opened on 1 January 2026 under CAC and SAMR Order No. 20. 第20号令使个人信息保护认证成为可用通道，2026年1月1日起施行。Eligibility is narrow: non-CIIO handlers, 100,000 to under 1m individuals' non-sensitive data...
2026-08-28
China has removed foreign-equity caps on internet data centre (IDC) and other value-added telecom services in Beijing, Shanghai, Hainan and Shenzhen.中国已在北京、上海、海南、深圳取消互联网数据中心（IDC）等增值电信业务的外资股比限制。As of June 2026, 166 foreign-invested enterprises had received...
2026-08-28
China's telecom value-added services (VAS) liberalization has reached 166 foreign-funded pilot approvals as of the first half of 2026. 截至 2026 年上半年，增值电信业务扩大开放试点已向 166 家外资企业发放批复。The Ministry of Industry and Information...
Cybersecurity / 网络安全, PIPL Compliance / 个保法合规
2026-08-28
The Measures for Network Data Security Risk Assessment, jointly issued by the CAC, MIIT and MPS, took effect on 20 August 2026. 由国家网信办、工业和信息化部、公安部联合制定的《网络数据安全风险评估办法》于 2026 年 8 月 20...
2026-08-28
Cross-border transfers of employee personal information are exempt from the security-assessment, standard-contract and certification routes where they implement cross-border HR management under a duly adopted labour rule or collective...