China Publishes Measures on Standard Contract for Cross-Border Transfer of Personal Information

The Cyberspace Administration of China (CAC) issued the final version of the Measures on the Standard Contract for the Cross-Border Transfer of Personal Information (Standard Contract Measures) on February 24, 2023, which includes a template standard contract (Standard Contract). The Measures will take effect on June 1, 2023, but set forth a six-month grace period until December 1, 2023, to provide companies with time to take actions for compliance.

In their recent client alert, “China Publishes Measures on Standard Contract for Cross-Border Transfer of Personal Information,” colleagues Jenny (Jia) Sheng, Chunbin Xu and Wenjun Cai break down the details of this final version, including a discussion of when Standard Contract Measures apply, the Personal Information Protection Impact Assessment (PIPIA) and notable compliance obligations.