CAC released the final version of the personal information cross-border data transfer (CBDT) standard contract regulation, as well as the standard contractual clauses (SCCs) that data processors and foreign data receivers should conclude on February 24.
The finalized documents have few changes from the first draft, leaving in place an inflexible framework that many companies cannot use.
However, the final version contains some minor improvements and affords a six-month grace period.