How does China restrict cross border data transfers?

The PIPL requires a security assessment, certification, or a standard contract for transfers abroad, and data localisation applies to operators of critical information infrastructure.

Azija in Pacifik

Privolitev za piškotke v državi 中国

Q: What is separate consent under China's PIPL?

The PIPL requires distinct, specific consent for certain activities such as sharing data with third parties, processing sensitive data, and cross border transfers, rather than one bundled consent for everything.

Privolitev in varstvo podatkov v državi 中国

China's PIPL, in force since November 2021 and led by the CAC, is comprehensive and in some respects stricter than the GDPR. It requires separate consent for specific activities such as sharing data with third parties, processing sensitive data, cross border transfers, and public disclosure, rather than a single bundled consent. Cross border transfers face strict controls, including a security assessment, certification, or standard contract route, and data localisation applies to critical information infrastructure. Penalties reach up to 50 million yuan or 5 percent of turnover, plus possible suspension of business. Notices must be in Chinese. Cookies and tracking that handle personal information need consent and clear notice.

Nadzorni organ

Cyberspace Administration of China (CAC)

Stanje

Personal Information Protection Law (PIPL) in force since 1 November 2021

Glavni zakon

PIPL

Jeziki

简体中文

Za koga velja

Organizations that process personal information of individuals in China, including those abroad that handle data to provide products or services to people in China or to analyze their behavior.

Sankcije

Up to 50 million yuan or 5 percent of prior year annual turnover for serious violations

Ključne obveznosti

Obtain separate consent for sensitive data and cross-border transfers
Provide clear notice of purpose, method and scope
Honor access, copy, correction, deletion and portability rights
Carry out personal information protection impact assessments
Meet localization and transfer requirements for large processors

Lokalne smernice

Obtain separate consent for sharing, sensitive data, and transfers
Use a compliant cross border transfer mechanism
Provide notices in Chinese
Account for data localisation for critical infrastructure

Kako pomaga ConsentX

Explicit opt-in consent capture
Separate consent flows for sensitive data and transfers
Geo-aware banner for visitors in China
Consent receipts and rights workflow
Region rule engine tuned for China

Začnite brezplačno

yoursite.com

中国

Vaša zasebnost nam je pomembna

Pred vsakim nenujnim piškotkom vas prosimo za privolitev, v skladu s pravili, ki veljajo v vaši regiji.

Dovoli vseZavrni nenujneUpravljanje nastavitev

Privolitev zabeležena

sha256 · chain ok

Ta stran je strojno prevedena in lahko vsebuje napake. Preden se nanjo zanesete, naj pravne podrobnosti pregleda usposobljen lokalni pravni svetovalec.

Pripravite 中国 s ConsentX

Pasice glede na regijo, predhodno blokiranje skript, DSAR in dokazi, odporni na spreminjanje.

Začnite brezplačno Rezervirajte predstavitev

Kako izpolniti zahteve predpisa 中国 s ConsentX

1
Preglejte svoje spletno mesto
Zaženite brezplačen pregled, da najdete vsak piškotek in sledilnik na spletnem mestu in natančno veste, kaj po predpisu 中国 zahteva privolitev.
2
Prikažite pasico privolitve glede na regijo
Dodajte pasico ConsentX. Zazna regijo vsakega obiskovalca in samodejno prikaže izkušnjo privolitve, ki jo zahteva 中国.
3
Blokirajte sledilnike do privolitve
Nenujne piškotke in sledilnike naj ostanejo blokirani, dokler obiskovalec ne privoli, da se pred privolitvijo nič ne sproži.
4
Zabeležite dokaz, odporen na spreminjanje
Vsaka izbira se shrani kot potrdilo o privolitvi, odporno na spreminjanje, ki ga lahko predložite pri nadzoru po predpisu 中国.
5
Zahteve obravnavajte pravočasno
Uporabite vgrajen postopek DSAR s časovniki SLA za odgovore na zahteve za dostop, izbris in ugovor v zakonskem roku.