Cross-border data transfers
Assess the data type, processing facts, exemptions and the applicable security assessment, standard contract or certification route.
Last verified: 2026-07-31Open topic
Topic research hubs
China data regulation by topic
Follow a practical research question through current rules, timelines, version comparisons, action steps, tools and official sources.
Personal information protection
The PIPL is central, but operational compliance also depends on audit, impact-assessment, security, sector and network-data rules.
Last verified: 2026-07-31Open topic
Important data
Identification remains source- and sector-dependent; one public national list does not resolve every classification.
Last verified: 2026-07-31Open topic
Generative AI and synthetic content
The governance stack combines service measures, algorithm and deep-synthesis rules, labeling duties, filing activity and topic-specific measures.
Last verified: 2026-07-31Open topic
Automotive data
Compliance combines sector processing rules with the PIPL, data-security duties and cross-border mechanisms.
Last verified: 2026-07-31Open topic
Healthcare and life-sciences data
Healthcare data requires layered review of personal information, sensitive information, cybersecurity, sector rules and regional mechanisms.
Last verified: 2026-07-31Open topic
Cybersecurity review
This is a national-security review mechanism for specified procurement and data processing, distinct from routine assessment or MLPS work.
Last verified: 2026-07-31Open topic
Personal information standard contract
The route requires eligibility analysis, a personal information protection impact assessment, the prescribed contract and filing under current guidance.
Last verified: 2026-07-31Open topic
Security assessment for cross-border data transfer
The CAC-administered route applies when current triggers are met, read with later facilitation provisions and filing guidance.
Last verified: 2026-07-31Open topic