CAC 2024 Provisions, Articles 2 and 10: data not announced as important data need not be filed as such, and notice, separate consent and an impact assessment still apply (Cyberspace Administration of China, Provisions on Promoting and Regulating Cross-Border Data Flows (Order No. 16, 22 Mar. 2024), Arts. 2 and 10 (Chinese text))
Translation: data that no authority or region has notified or publicly announced as important data need not be treated as important data for the security assessment; and a handler that sends personal information abroad must still give notice, obtain the individual's separate consent and carry out a personal information protection impact assessment under the laws. The volume exemptions therefore remove only the filing, not the consent and assessment duties.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“未被相关部门、地区告知或者公开发布为重要数据的，数据处理者不需要作为重要数据申报数据出境安全评估。 ... 数据处理者向境外提供个人信息的，应当按照法律、行政法规的规定履行告知、取得个人单独同意、进行个人信息保护影响评估等义务。”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide