China’s cross-border data transfer (“CBDT”) is undergoing a significant transformation, including the introduction of data whitelist systems in key pilot areas. This measure represents a shift towards a more nuanced regulatory framework, aiming to balance data security with the needs of businesses operating in an increasingly interconnected global economy. This article will focus on two areas in Tianjin and Shanghai, delve into the whitelist system, exploring the impact and potential future trajectory.
The “China (Tianjin) Free Trade Zone Data Exit Management List (Negative List) (2024 Edition)” (hereinafter referred to as the “Negative List”) released by the China (Tianjin) Free Trade Zone (hereinafter referred to as “Tianjin FTZ”) on May 9, 2024, is a landmark development. As China’s first comprehensive CBDT whitelist, it covers the industrial development and regulatory needs of eight key areas in the free trade zone, including biomedicine, service outsourcing, finance, internet platforms, automobiles, integrated circuits, meteorology, and international trade. It divides the data of enterprises going abroad into 13 categories and 46 subcategories, such as strategic materials and bulk commodities, natural resources and environment, industry, and finance, and makes detailed descriptions of the basic characteristics of each category of data, making it easy for CBDT enterprises to understand and operate.
In addition to simply listing the approved data types, the Negative List also clarify the thresholds for mandatory security assessments by the Cyberspace Administration of China (CAC). By specifying the amount of personal information that triggers this requirement, companies can proactively fulfill their compliance obligations and avoid potential regulatory obstacles. This clarity is crucial to promoting the transparency and predictability of the CBDT process.
Shanghai Lingang New Area followed closely behind, releasing its own CBDT white list on May 17, 2024 – the “China (Shanghai) Free Trade Zone Lingang New Area Data Cross-border Scenario-based General Data List and List Supporting Operation Guide” (hereinafter referred to as the “List and Operation Guide “). However, unlike Tianjin’s comprehensive approach, Shanghai chose a more targeted strategy, focusing on three key areas: intelligent connected vehicles (ICV), biopharmaceuticals, and public fund management. It involves 11 scenarios, including cross-border production and manufacturing of intelligent networked vehicles, pharmaceutical clinical trials and R&D, and fund market research and information sharing. These areas represent strategically important areas for China’s economic development, highlighting the government’s focus on promoting data flow in these key industries.
The List and Operation Guide allows companies in designated industries operating in Lingang New Area to transfer data abroad within specific categories without prior approval from regulatory authorities. This simplified process is currently being piloted for 12 months, allowing authorities to assess its regulation effectiveness during this period and potentially expand the applicable scope of the simplified process in the future. This measure highlights China’s cautious and progressive regulation landscape to regulatory reform of CBDT.
First, the whitelist system significantly reduces the administrative procedure burden for companies engaged in CBDT, cancels the procedure for separate approvals for listed specific data types, saves processing time and operating costs.
At the same time, the clear articulation of specific data types and security assessment thresholds enhances clarity and predictability of regulation, enabling companies engaged in CBDT to better plan their data transfer strategies.
In addition, Shanghai Lingang New Area’s targeted approach highlights the government’s focus on promoting data flow in strategically important areas, which will stimulate investment and innovation in these areas.
Finally, this whitelist system represents an important step forward of China’s CBDT regulation landscape, and it remains dynamic development. Companies engaged in CBDT must pay close attention to constantly evolving regulations and ensure that their CBDT activities always comply with all applicable laws and regulations.
The introduction of these CBDT whitelists heralds China’s shift towards a more open and efficient CBDT regulation system. If the pilot projects in Tianjin and Shanghai are successful, this whitelist mechanism may be expected to extend to other industries and regions. This may pave the way for a more standardized and transparent CBDT regulation approach, promoting international cooperation and innovation.
However, the whitelist system also exists certain challenges. Ensuring interoperability between different whitelists and coordinating data protection standards across jurisdictions and maintaining a balance between promoting data flow and safeguarding national security and individual privacy, are crucial to fully realize the potential of this measure
In short, China’s CBDT with the white list provides a more streamlined and predictable data transfer regulation method, while also highlighting the government’s focus on data security and key strategic industries. As China continues to refine its regulatory framework, companies should pay close attention to these developments and adjust their data transfer strategies accordingly, to ensure that CBDT activities are legal and compliant.
Preface As the leader of China’s economic development and the forefront of reform and opening up, Shanghai has always attached great importance to attracting foreign investment. Recently, the Shanghai Government deliberated and adopted a series of policy measures to promote the sustained economic recovery, and at the same time actively responded to the Action Plan
In recent years, the winter sports industry has seen unprecedented global growth, particularly with the successful hosting of the Beijing 2022 Winter Olympics and the upcoming Milan-Cortina 2026 Winter Olympics. These events have not only brought significant attention to winter sports but have also spurred a surge in international investment and collaboration. Legal sectors such
Introduction With the continuous improvement of labor laws and regulations, open-ended labor contracts, as a form of contract that provides stronger protection for the rights and interests of employees, have attracted increasing attention. In particular, whether employees have the right to demand the signing of open-ended labor contracts after two consecutive fixed-term labor contracts has
