On February 24, 2023, the Cyberspace Administration of China (CAC) released the Standard Contract of Personal Information Export (PRC SCCs) and the Measures on the Standard Contract of Personal Information Export (Measures).
These apply to the transport (transfer) of any personal information from China except where even stricter measures are required (such as for) critical information, large volume and/or sensitive personal information). The PRC SCCs and Measures are effective on June 1, 2023 for any new transfers. A six-month grace period will apply to any transfers made before June 1, 2023. Companies need to act as soon as possible to ensure compliance. The main aspects of the PRC SCCs are detailed in this alert.
