How does China restrict cross border data transfers?

The PIPL requires a security assessment, certification, or a standard contract for transfers abroad, and data localisation applies to operators of critical information infrastructure.

Asia-Pasifik

Persetujuan cookie di 中国

Q: What is separate consent under China's PIPL?

The PIPL requires distinct, specific consent for certain activities such as sharing data with third parties, processing sensitive data, and cross border transfers, rather than one bundled consent for everything.

Persetujuan dan hukum privasi di 中国

China's PIPL, in force since November 2021 and led by the CAC, is comprehensive and in some respects stricter than the GDPR. It requires separate consent for specific activities such as sharing data with third parties, processing sensitive data, cross border transfers, and public disclosure, rather than a single bundled consent. Cross border transfers face strict controls, including a security assessment, certification, or standard contract route, and data localisation applies to critical information infrastructure. Penalties reach up to 50 million yuan or 5 percent of turnover, plus possible suspension of business. Notices must be in Chinese. Cookies and tracking that handle personal information need consent and clear notice.

Otoritas

Cyberspace Administration of China (CAC)

Status

Personal Information Protection Law (PIPL) in force since 1 November 2021

Undang-undang utama

PIPL

Bahasa

简体中文

Siapa yang wajib mematuhi

Organizations that process personal information of individuals in China, including those abroad that handle data to provide products or services to people in China or to analyze their behavior.

Sanksi

Up to 50 million yuan or 5 percent of prior year annual turnover for serious violations

Kewajiban utama

Obtain separate consent for sensitive data and cross-border transfers
Provide clear notice of purpose, method and scope
Honor access, copy, correction, deletion and portability rights
Carry out personal information protection impact assessments
Meet localization and transfer requirements for large processors

Panduan lokal

Obtain separate consent for sharing, sensitive data, and transfers
Use a compliant cross border transfer mechanism
Provide notices in Chinese
Account for data localisation for critical infrastructure

Bagaimana ConsentX membantu

Explicit opt-in consent capture
Separate consent flows for sensitive data and transfers
Geo-aware banner for visitors in China
Consent receipts and rights workflow
Region rule engine tuned for China

Mulai gratis

yoursite.com

中国

Kami menghargai privasi Anda

Kami meminta persetujuan Anda sebelum cookie non-esensial apa pun, sesuai aturan yang berlaku di wilayah Anda.

Izinkan semuaTolak yang non-esensialKelola preferensi

Persetujuan tercatat

sha256 · chain ok

Halaman ini diterjemahkan mesin dan mungkin mengandung kesalahan. Tinjau detail hukumnya bersama penasihat hukum lokal yang kompeten sebelum mengandalkannya.

Siapkan 中国 dengan ConsentX

Banner sesuai wilayah, pemblokiran skrip lebih awal, DSAR, dan bukti antimanipulasi.

Mulai gratis Pesan demo

Cara mematuhi 中国 dengan ConsentX

1
Pindai situs Anda
Jalankan pemindaian gratis untuk menemukan setiap cookie dan pelacak di situs Anda, sehingga Anda tahu persis apa yang memerlukan persetujuan menurut 中国.
2
Tampilkan banner persetujuan sesuai wilayah
Tambahkan banner ConsentX. Banner mendeteksi wilayah setiap pengunjung dan otomatis menampilkan alur persetujuan yang diwajibkan 中国.
3
Blokir pelacak sampai ada persetujuan
Biarkan cookie dan pelacak non-esensial tetap diblokir sampai pengunjung menyetujui, sehingga tidak ada yang berjalan sebelum persetujuan.
4
Rekam bukti antimanipulasi
Setiap pilihan disimpan sebagai tanda terima persetujuan antimanipulasi yang dapat Anda tunjukkan dalam audit 中国.
5
Tangani permintaan data tepat waktu
Gunakan alur DSAR bawaan dengan pengatur waktu SLA untuk menjawab permintaan akses, penghapusan, dan penolakan dalam tenggat hukum.