China
Coverage draftingAlso: PIPL, PRC, CAC, Cybersecurity Law
VERIFIED 2026-09-17 · REVIEW BY 2027-03-16
Certification by a professional body is one of the conditions for cross-border transfer in Article 38, alongside the security assessment and the standard contract.
Instruments
No instrument recorded for China yet.
Regulator
Exercisable rights
Access, correction, deletion and portability, with a right to an explanation of automated decisions
Through each lens
End user / data subject
What can I actually do about this today, and what does it cost me.
No end user / data subject analysis for China yet.
Business
What does this obligate us to build, and by when.
No business analysis for China yet.
Government
Government is one lens carrying two sub-lenses, each with judicial reviewability analysis.
No government analysis for China yet.
Policymaker
What did the drafters intend, and what did the text achieve.
No policymaker analysis for China yet.
Regulator / enforcer
What can this authority make stick on appeal.
No regulator / enforcer analysis for China yet.
Certifying body
What is the scope of what we are attesting to.
No certifying body analysis for China yet.
Front-line staff
What do I do when this lands on my desk.
No front-line staff analysis for China yet.
Human rights / privacy advocate
Who does this regime fail, and can that be shown.
No human rights / privacy advocate analysis for China yet.
Legal effects
No legal effect of any certification is recorded for China yet.
Sources
- Personal Information Protection Law of the PRC (NPC, Chinese), Arts. 24, 38, 45, 46, 47 and 60 · retrieved 2026-09-17 · http://www.npc.gov.cn/npc/c2/c30834/202108/t20210820_313088.html