China releases standard contract for cross-border transfers of personal information

China has introduced a standard contract for cross-border transfers of personal data, set to take effect on June 1, 2023, with a 6-month grace period for compliance. This move signifies progress in China’s cross-border data transfer framework.

The Cyberspace Administration of China (CAC) released the final version of measures on the standard contract for the cross-border transfer of personal information, including a template contract accompanying the measures. The measures take effect on 1 June 2023 but are subject to a 6-month grace period to allow companies time to bring their activities into compliance.

This marks another important step in establishing China’s cross-border data transfer framework.