How does China restrict cross border data transfers?

The PIPL requires a security assessment, certification, or a standard contract for transfers abroad, and data localisation applies to operators of critical information infrastructure.

Asja-Paċifiku

Kunsens għall-cookies f 中国

Q: What is separate consent under China's PIPL?

The PIPL requires distinct, specific consent for certain activities such as sharing data with third parties, processing sensitive data, and cross border transfers, rather than one bundled consent for everything.

Kunsens u liġi tal-privatezza f 中国

Fil-qosor

China's PIPL, in force since November 2021 and led by the CAC, is comprehensive and in some respects stricter than the GDPR. It requires separate consent for specific activities such as sharing data with third parties, processing sensitive data, cross border transfers, and public disclosure, rather than a single bundled consent. Cross border transfers face strict controls, including a security assessment, certification, or standard contract route, and data localisation applies to critical information infrastructure. Penalties reach up to 50 million yuan or 5 percent of turnover, plus possible suspension of business. Notices must be in Chinese. Cookies and tracking that handle personal information need consent and clear notice.

Awtorità superviżorja

Cyberspace Administration of China (CAC)

Status

Personal Information Protection Law (PIPL) in force since 1 November 2021

Liġi prinċipali

PIPL

Lingwi

中文

Min irid jikkonforma

Organizations that process personal information of individuals in China, including those abroad that handle data to provide products or services to people in China or to analyze their behavior.

Penali

Up to 50 million yuan or 5 percent of prior year annual turnover for serious violations

Obbligi ewlenin

Obtain separate consent for sensitive data and cross-border transfers
Provide clear notice of purpose, method and scope
Honor access, copy, correction, deletion and portability rights
Carry out personal information protection impact assessments
Meet localization and transfer requirements for large processors

Gwida lokali

Obtain separate consent for sharing, sensitive data, and transfers
Use a compliant cross border transfer mechanism
Provide notices in Chinese
Account for data localisation for critical infrastructure

Kif tgħin ConsentX

Explicit opt-in consent capture
Separate consent flows for sensitive data and transfers
Geo-aware banner for visitors in China
Consent receipts and rights workflow
Region rule engine tuned for China

Ibda b xejn

yoursite.com

中国

Napprezzaw il-privatezza tiegħek

Nitolbu l-kunsens tiegħek qabel kull cookie mhux essenzjali, skont ir-regoli applikabbli fir-reġjun tiegħek.

Ippermetti kolloxIrrifjuta dawk mhux essenzjaliImmaniġġja l-preferenzi

Kunsens irreġistrat

sha256 · chain ok

Ipprepara għal 中国 ma ConsentX

Banners skont ir-reġjun, imblukkar minn qabel tal-iskripts, DSAR u provi reżistenti għall-manipulazzjoni.

Ibda b xejn Ibbukkja dimostrazzjoni

Din il-paġna ġiet tradotta awtomatikament u jista jkun fiha żbalji. Jekk jogħġbok irrevedi d-dettalji legali ma konsulent legali lokali kwalifikat qabel ma toqgħod fuqha.

Kif tikkonforma ma 中国 bl-użu ta ConsentX

1
Skennja s-sit tiegħek
Mexxi skan bla ħlas biex issib kull cookie u tracker fis-sit tiegħek, biex tkun taf eżatt x jeħtieġ kunsens taħt 中国.
2
Uri banner tal-kunsens skont ir-reġjun
Żid il-banner ta ConsentX. Jagħraf ir-reġjun ta kull viżitatur u juri awtomatikament l-esperjenza tal-kunsens li jitlob 中国.
3
Imblokka t-trackers sal-kunsens
Żomm il-cookies u t-trackers mhux essenzjali imblukkati sakemm il-viżitatur jaqbel, biex xejn ma jitħaddem qabel il-kunsens.
4
Irreġistra prova reżistenti għall-manipulazzjoni
Kull għażla tinħażen bħala rċevuta ta kunsens reżistenti għall-manipulazzjoni li tista tippreżenta f awditu taħt 中国.
5
Ittratta t-talbiet fil-ħin
Uża l-fluss DSAR integrat b timers tal-SLA biex twieġeb talbiet ta aċċess, tħassir u rinunzja fil-limitu ta żmien legali.