On 22 March, the Cybersecurity Administration of China (CAC) released the final version of a regulation governing the overseas transfer of personal, business and other data, including of health and medical data with implications for the biopharma industry.
The regulation, which takes effect immediately, sets thresholds for when companies have to file for such transfers - at one million cases of personal data or 10,000 of "sensitive" personal...
For transfers of between 100,000 and one million cases of personal data, companies must sign a standard contract with the overseas receiving party or get certification of personal data protection....