China’s National Information Security Standardization Technical Committee released guidance on conducting cross-border processing of personal information “in a standardized manner” and in accordance with the Personal Information Protection Law. The “Practice Guidelines for Cybersecurity Standards — Cross-border Processing of Personal Information” covers basic security principles and requirements for cross-border transfers, as well as “the protection of the rights and interests of personal information subjects.”
Full Story