Two Departments Adjust Basis Standards for Certification of Cross-Border Provision of Personal Information

On December 12, 2025, the State Administration for Market Regulation and the Cyberspace Administration of China issued the Announcement on Changing the Basis Standards for Certification of Cross-Border Provision of Personal Information (the “Announcement”), which took effect immediately.

The Announcement clarifies that, from the date of publication, the basis standards for certification involved in cross-border processing activities under the Personal Information Protection Certification Implementation Rules are adjusted from GB/T 35273 to GB/T 35273 and GB/T 46068. GB/T 46068 is the national standard “Data Security Technology Security Certification Requirements for Cross-Border Processing Activities of Personal Information”. Enterprises conducting certification for cross-border provision of personal information shall comply with the above new standards to ensure compliance.