On November 18, 2022, the State Administration for Market Regulation (SAMR) and the Cyberspace Administration of China (CAC) of China jointly issued the Implementation Rules for Personal Information Protection Certification (hereinafter referred to as “the Implementation Rules”).

The Implementation Rules stipulates the basic principles and requirements for the certification of personal information processors to carry out personal information collection, storage, use, processing, transmission, provision, disclosure, deletion and cross-border processing activities. All the activities should adhere to GB/T 35273 Information Security Technology - Personal Information Security Specification and TC260-PG-20222A Safety Specifications for Certification of Trans-boundary Processing of Personal Information. The certificate is valid for three years and requires post-certification supervision by certification bodies.

If you have any question or need more information on the topic, please contact: assistant@bestao-consulting.com