More than nine months after the Personal Information Protection Law (PIPL) came into force in the PRC, the Cyberspace Administration of China (CAC) issued the long-awaited Draft Provisions on Standard Contracts for the Export of Personal Information (Draft Provisions) on 30 June 2022.
The Draft Provisions supplement Article 38(3) of the PIPL, which provides that data controllers may use a standard contract in order to transfer personal information outside of the PRC (SCC Mechanism). A draft standard contract has been annexed to the Draft Provisions (Draft Standard Contract). The deadline for comments and feedback on the Draft Provisions is 29 July 2022.