Cyberspace Administration of China, Measures for Security Assessments of the Transfer of Personal Information Overseas (Draft for Comments)

Main contents: If a network operator is to transfer overseas personal information collected in the course of its operations in the People's Republic of China (Transfer Personal Information Overseas), it shall carry out a security assessment in accordance herewith. If it is determined through a security assessment that Transferring the Personal Information Overseas could have an impact on national security or prejudice the public interest, or that the security of the personal information cannot be effectively ensured, the information may not be transferred overseas (Article 2).