How does China restrict cross border data transfers?

The PIPL requires a security assessment, certification, or a standard contract for transfers abroad, and data localisation applies to operators of critical information infrastructure.

Asien og Stillehavsområdet

Cookiesamtykke i 中国

Q: What is separate consent under China's PIPL?

The PIPL requires distinct, specific consent for certain activities such as sharing data with third parties, processing sensitive data, and cross border transfers, rather than one bundled consent for everything.

Samtykke og databeskyttelse i 中国

Kort fortalt

China's PIPL, in force since November 2021 and led by the CAC, is comprehensive and in some respects stricter than the GDPR. It requires separate consent for specific activities such as sharing data with third parties, processing sensitive data, cross border transfers, and public disclosure, rather than a single bundled consent. Cross border transfers face strict controls, including a security assessment, certification, or standard contract route, and data localisation applies to critical information infrastructure. Penalties reach up to 50 million yuan or 5 percent of turnover, plus possible suspension of business. Notices must be in Chinese. Cookies and tracking that handle personal information need consent and clear notice.

Tilsynsmyndighed

Cyberspace Administration of China (CAC)

Status

Personal Information Protection Law (PIPL) in force since 1 November 2021

Primær lov

PIPL

Sprog

中文

Hvem er omfattet

Organizations that process personal information of individuals in China, including those abroad that handle data to provide products or services to people in China or to analyze their behavior.

Sanktioner

Up to 50 million yuan or 5 percent of prior year annual turnover for serious violations

Vigtigste forpligtelser

Obtain separate consent for sensitive data and cross-border transfers
Provide clear notice of purpose, method and scope
Honor access, copy, correction, deletion and portability rights
Carry out personal information protection impact assessments
Meet localization and transfer requirements for large processors

Lokal vejledning

Obtain separate consent for sharing, sensitive data, and transfers
Use a compliant cross border transfer mechanism
Provide notices in Chinese
Account for data localisation for critical infrastructure

Sådan hjælper ConsentX

Explicit opt-in consent capture
Separate consent flows for sensitive data and transfers
Geo-aware banner for visitors in China
Consent receipts and rights workflow
Region rule engine tuned for China

Kom gratis i gang

yoursite.com

中国

Vi værner om dit privatliv

Vi beder om dit samtykke før enhver ikke-nødvendig cookie, efter de regler der gælder i din region.

Tillad alleAfvis ikke-nødvendigeAdministrér præferencer

Samtykke registreret

sha256 · chain ok

Gør 中国 klar med ConsentX

Regionsbestemte bannere, forudgående scriptblokering, DSAR og manipulationssikret dokumentation.

Kom gratis i gang Book en demo

Denne side er maskinoversat og kan indeholde fejl. Få de juridiske detaljer gennemgået af en kvalificeret lokal juridisk rådgiver, før du forlader dig på den.

Sådan overholder du 中国 med ConsentX

1
Scan dit website
Kør en gratis scanning for at finde hver cookie og tracker på dit website, så du ved præcis, hvad der kræver samtykke efter 中国.
2
Vis et regionsbestemt samtykkebanner
Tilføj ConsentX-banneret. Det registrerer hver besøgendes region og viser automatisk den samtykkeoplevelse, som 中国 kræver.
3
Blokér trackere indtil samtykke
Hold ikke-nødvendige cookies og trackere blokeret, indtil den besøgende accepterer, så intet udløses før samtykket.
4
Registrér manipulationssikret dokumentation
Hvert valg gemmes som en manipulationssikret samtykkekvittering, som du kan fremlægge ved et 中国-tilsyn.
5
Håndtér anmodninger til tiden
Brug det indbyggede DSAR-workflow med SLA-timere til at besvare anmodninger om indsigt, sletning og fravalg inden for fristen.