Shanghai Cyberspace Administration and Shanghai Data Bureau issued measures to
facilitate cross-border data flows, aligning with national data-export security
rules. The measures systematize linkage of data-export security assessments,
filing of standard contracts for personal-information transfers,
personal-information export certification and a data-export negative list;
establish cross-department coordination and streamlined filing procedures to
guide firms to lawfully, efficiently use the negative list for transfers; and
commit to expanding sector coverage and dynamically updating the list.
