Further to the issuance of the Cyber Security Law on 7 November 2016 (which will come into force on 1 June 2017), the Cyberspace Administration of China released a draft version of the Measures for the Security Assessment of Transfers of Personal Information and Critical Data Overseas (the “Draft Measures”) on 11 April 2017 for public comment.
As detailed in our previous client alert (link), the Cyber Security Law imposes an obligation on operators of key information infrastructure to localise in China all personal information and critical data collected in China. It also subjects any transfer of such data overseas to a security assessment.
The Draft Measures would specifically regulate such security assessment, as well as broaden the obligation to localise data in China.
This Client Alert highlights the key points of the Draft Measures and their potential impact on network operators in China.
Please click on the file below to read the full Client Alert.