The Cyberspace Administration of China published the Draft Administrative Measures on Evaluating the Security of Transmitting Personal Information Overseas June 13, prompting many to worry about the reemergence of data localization. The CAC published a previous draft measure in 2017 that had the first proposed general obligations of data localization for companies in mainland China; however, it was met with strong negative reaction and ultimately was not enacted. EY Data Protection Officer Galaad Delval, CIPP/E, looks at the CAC’s new draft and examines whether data localization has returned to the discussion table under another form or if the 2019 document solely details a new cross-border transfer framework for companies in the country.
Full Story