China introduces new cross-border data transfer rules, effective January 2026
China has introduced new regulations requiring non-critical information infrastructure operators to obtain certifications for cross-border personal data transfers, effective January 1, 2026. This follows a recent fine against Dior's Shanghai subsidiary for illegally transmitting customer data overseas without proper security assessments or consent, highlighting the enforcement of data protection laws.
China has introduced new regulations requiring non-critical information infrastructure operators to obtain certifications for cross-border personal data transfers, effective January 1, 2026. This follows a recent fine against Dior's Shanghai subsidiary for illegally transmitting customer data overseas without proper security assessments or consent, highlighting the enforcement of data protection laws.
