Xinlan Liu Senior Legal Consultant

The Cyberspace Administration of China released the Measures for the Security Assessment of Cross-border Data Transfer on July 7, 2022, to regulate cross-border data transfers in accordance with the Cybersecurity Law, the Data Security Law, and the Personal Information Protection Law. The measures go into effect on September 1, 2022.

The Measures provide a six-month grace period from September 1, 2022, to March 1, 2023, for companies with previous cross-border data transfer activities to become compliant with the new standards. Companies with outbound data transfers should seek knowledgeable counsel to monitor the implementation and enforcement of the Measures by the CAC.

The Ministry of Commerce (MOFCOM) released Order No. 1 of 2021 on Rules on Counteracting Unjustified Extraterritorial Application of Foreign Legislation and Other Measures (the Rules) effective on January 9, 2021.

The State Administration for Market Regulation (SAMR) on June 15, 2020, issued a Circular on Seeking Public Comments on the Administrative Regulations of the People’s Republic of China on Registration of Commercial Entities (Draft) (关于《中华人民共和国商事主体登记惯例条例（草案）》公开征求意见的通知, http://www.samr.gov.cn/hd/zjdc/202006/t20200615_317040.html) (the Administrative Registration Regulations).

The Cyberspace Administration of China (i.e., the Office of the Central Cyberspace Affairs of China) promulgated the draft Measures for Data Security Management (the Measures) for public comment on May 28.

This update has also been published in the February-March 2020, Vol. 6 No. 2 issue of Pratt's Privacy & Cybersecurity Law Report.

What you need to know now about legal and logistical challenges companies face in returning to China.