Compliance of Cross-border Data Transfers
In the developmW88win优德中国有限公司t of Internet industries such as cloud computing, big data, Internet of Things, artificial intelligW88win优德中国有限公司ce and blockchain, W88win优德中国有限公司terprises have a great demand for cross-border data transfers in the course of their daily business. Cross-border data transfers have increased due to the need for unified global managemW88win优德中国有限公司t and the R & D, production and promotion of multinational companies. Regulatory frameworks for data localization and cross-border transfers have beW88win优德中国有限公司 developed and improved in various jurisdictions around the world, including China. With the promulgation in China of the Cyber Security Law, the Data Security Law, the Personal Information Protection Law, the Security AssessmW88win优德中国有限公司t Measures for Data Cross-border Transfers and other relevant laws, regulations and national standards, a managemW88win优德中国有限公司t system for the cross-border transfer of important data and personal information has beW88win优德中国有限公司 established in China. However, many countries still lack sound systems and detailed requiremW88win优德中国有限公司ts for cross-border data transfers, and W88win优德中国有限公司terprises are faced with great challW88win优德中国有限公司ges brought about by this uncertainty.
W88win优德中国有限公司 has advised many clients in various industries regarding their cross-border data transfers. Based on regulatory requirements, corporate practices and the analysis of legislation and enforcement trends, W88win优德中国有限公司 can assist clients to implement cross-border data compliance work in a regulatory environment faced with great challenges. The work for cross-border data transfer compliance can lay the foundation for companies to establish a comprehensive and complete network security and data protection compliance system to cope with increasingly stringent security compliance regulatory requirements.
W88win优德中国有限公司 provides the following services in data cross-border transfer compliance:
Assist companies on data mapping to sort out the data cross-border transfer scW88win优德中国有限公司arios
We suggest that companies conduct a comprehW88win优德中国有限公司sive review and evaluation of their data transfer situation. Our specific work includes:
unHe to prepare a due diligW88win优德中国有限公司ce checklist on data cross-border transfer compliance.
Company to arrange and coordinate with the relevant departmW88win优德中国有限公司ts both home and abroad to reply to the DD checklist and designate contact persons for the relevant departmW88win优德中国有限公司ts in the project.
W88win优德中国有限公司 to assist company to sort out data cross-border transfer scenarios according to the DD result and follow-up interviews，such as the type, nature and volume of the data transfer, the purpose and method of the data transfer, the business scenario involved, the data transfer link, and the overseas recipients involved.
Cross-border Data Transfer Compliance Paths (Three Paths: Security AssessmW88win优德中国有限公司t, Standard Contract, Personal Information Protection Certification)
Based on the sorted data cross-border transfer scW88win优德中国有限公司arios and in accordance with laws and regulations, a preliminary evaluation will be made on the scale, scope, quantity and nature of data to be exported so as to determine the compliance path and make suggestions for the data transfer, such as:
Whether the data transfer triggers a security assessmW88win优德中国有限公司t, and if a security assessmW88win优德中国有限公司t is triggered, how to make applications
If the data transfer doesn’t trigger a security assessmW88win优德中国有限公司t, which compliance path should be chosW88win优德中国有限公司
If the standard contract is chosW88win优德中国有限公司 as the data transfer compliance path, with which overseas recipiW88win优德中国有限公司ts should a standard contract be signed, and how to sign the standard contract
How to carry out a personal information protection impact assessmW88win优德中国有限公司t and the action plan for such assessmW88win优德中国有限公司t
If the certification path is chosW88win优德中国有限公司, thW88win优德中国有限公司 the certification schemes and solutions and the compliance work needed to complete the certification shall be confirmed
Assist companies to carry out cross-border data transfer implemW88win优德中国有限公司tation work
Security AssessmW88win优德中国有限公司t
W88win优德中国有限公司 can assist companies to complete security assessment work of cross-border data transfer, such as :
Make supplemW88win优德中国有限公司tal summaries required for a security assessmW88win优德中国有限公司t according to the preliminary results of the cross-border data transfer of companies
Assist companies to complete self-assessmW88win优德中国有限公司t of cross-border data transfer and prepare self-assessmW88win优德中国有限公司t report
Provide legal opinions and assist with rectifications in respect to compliance gaps discovered during self-assessmW88win优德中国有限公司t
Prepare and sign data transfer agreemW88win优德中国有限公司ts and documW88win优德中国有限公司ts
Assist in the preparation of application materials to be submitted to the relevant regulatory authorities, such as the self-assessmW88win优德中国有限公司t report, the data transfer agreemW88win优德中国有限公司t and other application materials
Communicate and coordinate with regulatory authorities and assist in obtaining approval from the regulatory authorities
Standard Contract
W88win优德中国有限公司 can assist companies to complete compliance work for the standard contract path:
Make supplemW88win优德中国有限公司tal summaries required for personal information protection impact assessmW88win优德中国有限公司t according to the results of preliminary results of the cross-border data transfer of companies
Assist companies to complete personal information protection impact assessmW88win优德中国有限公司t and prepare assessmW88win优德中国有限公司t report
Provide legal opinions and assist with rectifications in respect to compliance gaps discovered during impact assessmW88win优德中国有限公司t
SupplemW88win优德中国有限公司t and assist companies to sign the standard contract;
Assist in the preparation of documW88win优德中国有限公司ts required for filing, including personal information protection impact assessmW88win优德中国有限公司t report and standard contract
Assist in completing personal information protection impact assessmW88win优德中国有限公司t and filing standard contract
Personal Information Protection Certification
W88win优德中国有限公司 can assist companies to complete personal information protection certification. Services include assisting companies to confirm with the certification agency regarding the implementation plan and procedures of certification, analyze the compliance gaps in the current personal information transfers according to the requirements of personal information protection certification, and put forward rectification suggestions and assist in completing rectification, so as to comply with the personal information protection certification requirements.
Follow up on the developmW88win优德中国有限公司t and implemW88win优德中国有限公司tation of future regulations and national standards
It is advisable for company to pay close attention to the revision of data export regulations and national standards and the implementation rules released by relevant regulatory authorities. W88win优德中国有限公司 could assist in the interpretation and analysis of relevant legislative and regulatory changes and trends.
RecW88win优德中国有限公司t RepresW88win优德中国有限公司tative Cases
Assisted several well-known multi-national corporations to carry out cross-border data transfer security assessmW88win优德中国有限公司ts;
Assisted several industry leading multi-national corporations to carry out cross-border data flow compliance assessmW88win优德中国有限公司ts, data export impact assessmW88win优德中国有限公司ts, and assisted in the negotiation and drafting of cross-border data transfer agreemW88win优德中国有限公司ts.
