The Cyberspace Administration of China (“CAC ”) issued the Measures on Standard Contracts for the Export of Personal In- formation (“SC Measures ”) on 24 February 2023, finalizing the hotly-anticipated standard contract for the export of personal information (“Standard Contract”) under the Personal Infor- mation Protection Law (“PIPL ”). The Finalized Measures come after more than a year since PIPL was brought in, and almost eight months after the release of the Draft Provisions on Stan- dard Contracts for the Export of Personal Information (“Draft Standard Contract Provisions ”). The finalized Standard Contract becomes effective on 1 June 2023, but with a 6-month grace period (until 30 Novem- ber 2023) for personal information exports which commenced prior to 1 June 2023.1 Personal information processors 2 (“data controllers ”) eligible to rely on the Standard Contract (see be- low section on Application ) are expected to revise their data export processes and procedures within the grace period to comply with the SC Measures and the Standard Contract.
Gabriela Kennedy
Mayer Brown JSM, Hong Kong