China. Data localisation / cross-border. Departmental rules

China SCC MeasuresMeasures on the Standard Contract for Outbound Transfer of Personal Information (个人信息出境标准合同办法)

In force

§1Summary

Synopsis

Introduces China's mandatory template contract for exporting personal information and requires the signed contract plus a PI impact assessment to be filed with the provincial CAC. It is the most-used export route for mid-volume exporters.

Key themes
  • standard contract
  • PIPIA
  • filing
  • provincial CAC
  • overseas recipient obligations
Unique features

Template cannot be negotiated beyond additions that do not conflict; filing within 10 working days of contract effect.

SaaS relevance

Most mid-sized SaaS exporters from China use this route for intra-group or vendor transfers.

§2Obligations

Cross-border transfers
Template contract + filing
Maximum penalty
Per PIPL

§3Dates

Key dates
  • Adopted
  • In force
  • Grace period to 2023-12-01; eligibility thresholds reset by 2024 Provisions

§4Text and authority

Text
Authority
Cyberspace Administration of China (CAC)

§5Where it applies

Domestic law of
China

§6Sources and verification

Sources consulted
Verification

High confidence.

text_url_en path not opened directly.