Measures for the Security Assessment of Outbound Data Transfers
Measures for the Security Assessment of Outbound Data Transfers (CAC Order No. 11 of 2022) is in force in China. This page holds what the official text states: dates, the named requirements, who supervises it and where the text is published.
- Measures for the Security Assessment of Outbound Data Transfers names when an assessment is required, self-assessment before filing and validity of an approved assessment.
- Measures for the Security Assessment of Outbound Data Transfers does not settle whether a single shipment, transfer or service meets the requirement; that follows from the facts of the case and from the supervising body.
- Supervised by Cyberspace Administration of China. Published by Cyberspace Administration of China.
- EU: GDPR — Regulation (EU) 2016/679. Chapter V of the GDPR governs the same step in the other direction, transfer out of the EU.
Identity
| Name in Chinese | 数据出境安全评估办法 |
|---|---|
| Identifier | CAC Order No. 11 of 2022 |
| Adopted | 2022-07-07 |
| Applies from | 2022-09-01 |
| Status as published | The measures apply since 1 September 2022 and set the thresholds that trigger a state security assessment. |
| Supervision | Cyberspace Administration of China |
| Areas named | Cross-border data transfer |
| Read against the source | 2026-08-17 |
Requirements in the text
- When an assessment is required — Reference: Article 4. Important data, CII operators and volume thresholds for personal information.
- Self-assessment before filing — Reference: Article 5. Own risk assessment of purpose, scope and the receiving party.
- Validity of an approved assessment — Reference: Article 14. The result is valid for a stated period and is renewed before it lapses.
Compared with the EU register
- GDPR — Regulation (EU) 2016/679: Chapter V of the GDPR governs the same step in the other direction, transfer out of the EU.
Compared with the US register
No pointer in the register
Official sources
- 数据出境安全评估办法 — Cyberspace Administration of China
The register states what the official texts say. It is not advice and it is not a verdict on any company.
ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.
Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.
