China Data Security Law (DSL) 31: Art. 31 Outbound transfer of important data: CIIOs under the Cybersecurity Law, others under the CAC's measures

The Cybersecurity Law's provisions govern the outbound security management of important data collected or produced in China by critical information infrastructure operators, and the measures for other data processors' outbound transfers of important data are formulated by the national cyberspace department with the State Council departments; under the CAC's 2024 provisions any outbound transfer of important data requires the CAC security assessment, and violation draws the Article 46 penalties.