China PI Export Certification Measures
In force China · In force Jan 1, 2026 · no upcoming deadlines
Deadlines
Summaries for reference, not legal advice. Check the official text.
What it does
Sets the third route for exporting personal information from China: certification by an accredited certification body. Available to non-CII handlers exporting personal information of 100,000 to under 1 million people (non-sensitive) or under 10,000 people's sensitive data in a year. Certificates last three years; overseas handlers apply through a local entity or representative.
- Who it applies to
- Non-CII personal information handlers, including overseas handlers, exporting personal information from China within the certification thresholds.
- Penalties
- Handled under the PIPL, Network Data Security Regulations and Certification and Accreditation Regulations.
- Enforced by
- CAC and State Administration for Market Regulation (SAMR)
- Official name
- Measures for Personal Information Outbound Transfer Certification
- Citation
- CAC and SAMR Order No. 20
- Topics
- data-residency, privacy
Research notes
Adopted by CAC on 2025-07-21, signed 2025-10-14, published 2025-10-17. Renewal applications are due 6 months before a certificate expires.
Related
Questions about China PI Export Certification Measures
- What are the China PI Export Certification Measures compliance deadlines?
- Jan 1, 2026: PI export certification measures take effect.
- When does China PI Export Certification Measures take effect?
- China PI Export Certification Measures took effect on Jan 1, 2026.
- Who does China PI Export Certification Measures apply to?
- Non-CII personal information handlers, including overseas handlers, exporting personal information from China within the certification thresholds.
- What are the penalties under China PI Export Certification Measures?
- Handled under the PIPL, Network Data Security Regulations and Certification and Accreditation Regulations.