China Personal Information Protection Law (PIPL) 34-36: Art. 34-36 State organs: within statutory authority and scope, with notice, storing within China and security assessment before any provision abroad

State organs processing personal information to perform statutory duties act within the authority and procedures laws and administrative regulations prescribe and not beyond the scope and limits their duties require, fulfil the notice obligation except under Article 18 or where notice would hinder their duties, store the information within China and, where provision abroad is truly necessary, conduct a security assessment with the relevant departments' support; organisations authorised by law to administer public affairs follow the same provisions (Article 37).