The Measures for the Certification of Outbound Personal Information Transfer became effective on January 1, 2026, completing the legal pathways for multinational corporations.
: In 2024 and 2025, Free Trade Zones (FTZs) like Beijing and Shanghai introduced "negative lists". For example, Beijing's list covers specific data in the automobiles, medicine, retail, and AI sectors that must undergo strict review before export. The Measures for the Certification of Outbound Personal
: On January 1, 2026, major amendments to the Cybersecurity Law (CSL) took effect. These updates increased penalties for data breaches and expanded the government's power to enforce rules against activities outside China that jeopardize national security. : On January 1, 2026, major amendments to
: Effective April 7, 2026, new regulations on industrial and supply chain security empower over 15 government agencies to monitor risks and act against foreign companies that harm China’s supply chains. Åsa (Sa) Carlsheimer and 4Pharma Åsa (Sa) Carlsheimer and 4Pharma