China releases new rules on personal data exports

Chinese regulators on Thursday released new rules on certifying cross-border transfers of personal information, requiring "non-critical information infrastructure operators" to apply for certifications before certain data transfers can be made.

Authorities said the framework aims to protect personal information rights and promote the secure and efficient cross-border flow of data, according to statements issued by the country's cyberspace and market regulators.

The rules will take effect on January 1, 2026, they said.