How does China restrict cross border data transfers?

The PIPL requires a security assessment, certification, or a standard contract for transfers abroad, and data localisation applies to operators of critical information infrastructure.

Azija i Pacifik

Privola za kolačiće u zemlji 中国

Q: What is separate consent under China's PIPL?

The PIPL requires distinct, specific consent for certain activities such as sharing data with third parties, processing sensitive data, and cross border transfers, rather than one bundled consent for everything.

Privola i zaštita podataka u zemlji 中国

China's PIPL, in force since November 2021 and led by the CAC, is comprehensive and in some respects stricter than the GDPR. It requires separate consent for specific activities such as sharing data with third parties, processing sensitive data, cross border transfers, and public disclosure, rather than a single bundled consent. Cross border transfers face strict controls, including a security assessment, certification, or standard contract route, and data localisation applies to critical information infrastructure. Penalties reach up to 50 million yuan or 5 percent of turnover, plus possible suspension of business. Notices must be in Chinese. Cookies and tracking that handle personal information need consent and clear notice.

Nadzorno tijelo

Cyberspace Administration of China (CAC)

Status

Personal Information Protection Law (PIPL) in force since 1 November 2021

Glavni zakon

PIPL

Jezici

简体中文

Na koga se odnosi

Organizations that process personal information of individuals in China, including those abroad that handle data to provide products or services to people in China or to analyze their behavior.

Sankcije

Up to 50 million yuan or 5 percent of prior year annual turnover for serious violations

Ključne obveze

Obtain separate consent for sensitive data and cross-border transfers
Provide clear notice of purpose, method and scope
Honor access, copy, correction, deletion and portability rights
Carry out personal information protection impact assessments
Meet localization and transfer requirements for large processors

Lokalne smjernice

Obtain separate consent for sharing, sensitive data, and transfers
Use a compliant cross border transfer mechanism
Provide notices in Chinese
Account for data localisation for critical infrastructure

Kako pomaže ConsentX

Explicit opt-in consent capture
Separate consent flows for sensitive data and transfers
Geo-aware banner for visitors in China
Consent receipts and rights workflow
Region rule engine tuned for China

Započnite besplatno

yoursite.com

中国

Vaša nam je privatnost važna

Tražimo vašu privolu prije svakog kolačića koji nije nužan, prema pravilima koja vrijede u vašoj regiji.

Dopusti sveOdbij one koji nisu nužniUpravljanje postavkama

Privola zabilježena

sha256 · chain ok

Ova je stranica strojno prevedena i može sadržavati pogreške. Prije nego što se na nju oslonite, zatražite provjeru pravnih pojedinosti od kvalificiranog lokalnog pravnog savjetnika.

Pripremite 中国 uz ConsentX

Banneri prema regiji, prethodno blokiranje skripti, DSAR i dokazi otporni na izmjene.

Započnite besplatno Dogovorite demo

Kako uskladiti poslovanje s propisom 中国 uz ConsentX

1
Skenirajte svoju web stranicu
Pokrenite besplatno skeniranje kako biste pronašli svaki kolačić i alat za praćenje na stranici i točno znali što zahtijeva privolu prema propisu 中国.
2
Prikažite banner privole prema regiji
Dodajte ConsentX banner. Prepoznaje regiju svakog posjetitelja i automatski prikazuje iskustvo privole koje 中国 zahtijeva.
3
Blokirajte alate za praćenje do privole
Držite kolačiće i alate za praćenje koji nisu nužni blokiranima dok posjetitelj ne pristane, kako se ništa ne bi pokrenulo prije privole.
4
Zabilježite dokaz otporan na izmjene
Svaki se odabir pohranjuje kao potvrda privole otporna na izmjene, koju možete predočiti u nadzoru prema propisu 中国.
5
Riješite zahtjeve na vrijeme
Koristite ugrađeni DSAR postupak s SLA mjeračima kako biste na zahtjeve za pristup, brisanje i prigovor odgovorili u zakonskom roku.