Public source reference library for China data regulation
Source policyMy Library中文
China Data RegulationLegal reference library

Research across the library

Search laws, regulations, standards and guides

Suggested searches

Current priorities

2026-07-03Revised Internet Information Service Measures draft2026-06-18Network data risk assessment: draft versus final

Explainer

Personal Information Export Standard Contract Filing Guide, Second Edition

A source-based guide to the method, process and materials for filing a personal-information export standard contract.

Statuspublished
Last updated2026-07-30
Last reviewed2026-07-30
SourceOfficial source
Independent editorial reference.This page is based on official Chinese source links for general informational purposes only. It is not legal advice, and the official Chinese text prevails.

Key Takeaways

  • The filing guide explains process and materials; it does not decide route eligibility.
  • The standard contract, impact assessment and filing information should describe the same transfer.
  • The official release identifies the provincial cyberspace authority as the filing authority.

The second-edition filing guide explains how to file a personal-information export standard contract. It should be read with the Standard Contract Measures and the 2024 data-flow provisions.

Route Boundary

The filing guide is not a substitute for route analysis. Before preparing a contract package, screen the transfer for security-assessment triggers and other controlling requirements. Confirm that the standard-contract route is available for the facts.

Core Filing Sequence

  1. Record the transfer facts and the route analysis.
  2. Complete the personal-information protection impact assessment.
  3. Execute the official standard contract with the overseas recipient.
  4. Prepare the current filing materials.
  5. Submit to the provincial cyberspace authority through the official channel.
  6. Preserve filing, change-management and reassessment records.

Package Consistency

The contract, impact assessment and filing information should identify the same parties, purpose, processing method, personal-information categories, scale, retention arrangements and rights-handling process.

Material differences between those documents are a quality-control issue even before a regulator reviews the package.

Change Management

A filed package describes a defined transfer. Changes to the purpose, scope, categories, recipient, processing arrangements or risk profile should be screened against the current measures and filing guidance rather than treated as ordinary administrative updates.

Common Errors

  • Starting the contract before checking route eligibility.
  • Using a generic impact assessment that does not match the filed transfer.
  • Treating execution of the contract as the end of the compliance process.
  • Failing to retain evidence of notice, consent or another applicable legal basis.
  • Assuming that a filing confirms substantive compliance.

Official Source Basis

Last source verification: 2026-07-30. The official Chinese source prevails. This editorial guide is not legal advice.