Promulgated by: Department of Commerce of Guangxi Zhuang Autonomous Region; China (Guangxi) Pilot Free Trade Zone Work Office; Cyberspace Administration of Guangxi Zhuang Autonomous Region; Big Data Development Bureau of Guangxi Zhuang Autonomous Region (with the relevant departments).
Filed with the Cyberspace Administration of China and the National Data Administration. Issued August 2025.
Translation note — DCC. Translated in full from Annex 2 to the joint issuing notice as published by the Guangxi government. Each sector’s list is a three-column table (data category / data sub-category / basic characteristics and description); the flattened source has been reconstructed. Terminology follows DCC’s bilingual glossary. The procedural framework is the Guangxi Negative List Management Measures (Trial); the enabling provision is Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows. “PRC territory” renders 中华人民共和国领域和中华人民共和国管辖的其他海域.
China (Guangxi) Pilot Free Trade Zone Data Export Management List (Negative List) (2025 Edition)
Explanatory Notes
-
The China (Guangxi) Pilot Free Trade Zone (hereinafter the “Guangxi FTZ”) data export management list is the list of data that, under policies, laws and regulations such as the Regulations on Network Data Security Management, the Measures for Data Export Security Assessment, the Measures on Standard Contracts for the Export of Personal Information and the Provisions on Promoting and Regulating Cross-border Data Flows, must be brought within the scope of management by data export security assessment, standard contract for the export of personal information, or personal information protection certification (hereinafter the “negative list”).
-
The negative list applies to data processors — enterprises, public institutions, organizations, associations and other entities — registered within the Guangxi FTZ that carry out data export and related activities.
-
The negative list is formulated in batches by industry and field. The 2025 batch publishes negative lists for four industries and fields: geographic-information and meteorological data services, enterprise credit-information services, live-streaming cross-border e-commerce, and overseas audio-visual production and distribution.
-
Where, in the industries and fields covered by the negative list, the data to be exported involves technical materials relating to controlled items under the Export Control Law of the People’s Republic of China or matters of technology export management under the Foreign Trade Law of the People’s Republic of China, the Export Control Law, the Foreign Trade Law and other laws, regulations and rules shall apply.
-
Before carrying out a data export activity, a data processor shall itself identify and determine the type and quantity of the data to be exported and assess whether the negative list applies to that data.
-
Where the data to be exported belongs to an industry or field covered by the negative list and, on assessment, falls within the negative list, the data processor shall declare a data export security assessment, conclude a standard contract for the export of personal information or pass personal information protection certification as the negative list requires; where the data to be exported does not fall within the negative list, the data processor may provide it abroad on its own.
-
Where the data to be exported does not belong to an industry or field covered by the negative list, the relevant national provisions — the Regulations on Network Data Security Management, the Measures for Data Export Security Assessment, the Measures on Standard Contracts for the Export of Personal Information, the Provisions on Promoting and Regulating Cross-border Data Flows and the like — shall apply.
-
A data processor providing personal information abroad shall, in accordance with laws and administrative regulations, perform the obligations of giving notice, obtaining the individual’s separate consent, and conducting a personal information protection impact assessment.
-
A data processor providing data abroad shall comply with laws and regulations, perform its data security protection obligations, and adopt technical and other necessary measures to safeguard the security of the data export. Where a data security incident occurs or may occur, it shall take remedial measures and promptly report to the cyberspace administration and other relevant industry competent departments.
-
The Cyberspace Administration, the Data Bureau, the Public Security Department and the Guangxi State Security Department of the Autonomous Region shall, together with the industry competent departments of the Autonomous Region, strengthen supervision, inspection and spot checks of data processors’ data export activities, and data processors shall cooperate actively.
-
The negative list is managed dynamically. For negative lists already issued, implementation and security risks shall be tracked and assessed and revision coordinated; for industries and fields for which a negative list has not yet been issued, actual data-export needs shall be assessed promptly and corresponding negative lists studied and formulated, continuously improving the Guangxi FTZ’s policy system for managing cross-border data flows.
-
The Guangxi FTZ may implement by reference the negative lists formally published by other pilot free trade zones nationwide.
-
Matters not covered by the negative list shall be interpreted by the Cyberspace Administration, the Data Bureau and the Department of Commerce of the Autonomous Region and the China (Guangxi) Pilot Free Trade Zone Work Office.
Sector 1: Geographic-Information and Meteorological Data Services
List of data requiring a data export security assessment
| Data category | Data sub-category | Basic characteristics and description |
|---|---|---|
| Important data | 1. Basic geographic information and geographic remote-sensing imagery data reaching the coverage, precision, scale or other thresholds prescribed by the State, or depicting sensitive areas and targets. | Including, without limitation, the sharing, exchange and service scenarios of basic geographic information and geographic remote-sensing imagery data. Includes: national or provincial basic surveying and mapping databases; high-resolution remote-sensing imagery (including satellite imagery and aerial photography); three-dimensional geographic information data and high-precision digital elevation models; spatial data on major projects, transport and pipelines (such as the distribution of high-speed rail and major bridges and tunnels, the spatial distribution of electricity or communications backbone networks, the routing of large oil and gas pipelines, and the geographic location and structure of flood-control embankments, water-conservancy hubs and similar works); geographic information on national borders and sensitive areas (such as detailed geographic coordinates and terrain features of border defense, coastlines, military-related areas and other sensitive areas prescribed by the State); real-time or near-real-time monitoring geographic remote-sensing imagery of key areas, military facilities or important industries (such as nuclear power stations, large water-conservancy projects and major transport routes); etc. Excludes: basic geographic information and geographic remote-sensing imagery data that does not depict the territory of the People’s Republic of China or other sea areas under the jurisdiction of the People’s Republic of China. |
| 2. Non-basic geographic information and geographic remote-sensing imagery data reaching a certain precision and scale whose leakage, tampering or destruction could directly endanger national security, economic operation, social stability, public health and safety. | Including, without limitation, the sharing, exchange and service scenarios of non-basic geographic information and geographic remote-sensing imagery data. Includes: resource-distribution data (such as the distribution of mineral resources, energy resources, hydrological and water resources, current land use and important agricultural resources); comprehensive natural-resources data covering the whole country or large regions (such as fine-grained, long-time-series, frequently updated datasets simultaneously containing multiple elements such as topography, landform, soil, vegetation, hydrology, meteorology and ecological environment); etc. Excludes: non-basic geographic information and geographic remote-sensing imagery data that does not depict conditions within PRC territory. | |
| 3. Meteorological data of all kinds reaching the scale or precision prescribed by the State, or usable to cause environmental security incidents, or serving the military, defense research, high-technology fields or disaster prevention. | Including, without limitation, the sharing, exchange and service scenarios of meteorological raw data, meteorological product data, forecast, prediction and warning data, and meteorological service data. Includes: important meteorological government-service information; assessment data for emergency response to major nuclear and pollution dispersion; decision-support materials submitted to the Party Central Committee and the Autonomous Region Party Committee; meteorological support data for major events; meteorological data supporting climate-change response (other than internationally exchanged information); crop-yield forecast and prediction data; Fengyun meteorological satellite Level-0 data and telemetry data; meteorological disaster warnings and major-disaster monitoring and prediction data; high spatio-temporal resolution meteorological element data for special industrial uses (such as low-altitude wind-field data, sounding data, mobile weather-radar observation data, or other weather data with major impact on military and critical applications); weather-radar base data; ground-based weather-modification operation site data; historical meteorological archives and extracted raw data (other than internationally exchanged information); weather-station metadata (other than internationally exchanged information); meteorological critical information infrastructure data; meteorological raw data from stations other than those participating in World Meteorological Organization global and regional exchange; etc. Excludes: data that does not depict meteorological conditions within PRC territory. |
Notes:
-
This list applies to enterprises, public institutions, organizations, associations and other entities carrying out geographic-information and meteorological data services within the Guangxi FTZ.
-
“Basic geographic information” in this list means geographic information data serving as the unified spatial positioning framework and the basis for spatial analysis, which reflects and describes the location, form and attributes of natural and social elements on the Earth’s surface such as survey control points, water systems, settlements and facilities, transport, pipelines, boundaries and administrative divisions, landforms, vegetation and soil, cadastre and place names.
-
“Geographic remote-sensing imagery data” in this list means two- or three-dimensional image information covering the Earth’s surface obtained through remote-sensing technology.
-
“Meteorological data” in this list means numbers, text, symbols, pictures, audio and video and the like in the field of atmospheric and space-weather science and technology obtained through observation and monitoring, survey and investigation, collection and exchange, scientific research, experimental development, production analysis, authorized management and similar means.
Sector 2: Enterprise Credit-Information Services
(1) List of data requiring a data export security assessment
| Data category | Data sub-category | Basic characteristics and description |
|---|---|---|
| Important data | 1. Data in enterprise credit information reflecting economic operation or financial activity at the aggregate level, in an industry, or in a key field. | Including, without limitation, the scenarios of financial credit, business-cooperation due diligence, investment, financing and M&A due diligence, ESG rating and green finance. Includes: data reflecting macroeconomic or key-industry economic operation (such as industry output value, market share, order volumes, transaction volumes and other core indicators usable to assess industry trends, economic structure and overall economic vitality); capacity, output, and raw-material supply and demand information for key links of industrial chains (such as important energy, key components and scarce resources); data relating to funding chains, financing channels and payment and settlement systems that could affect regional financial stability and enterprise operational security; etc. |
| 2. Data reflecting matters bearing on industrial competitiveness. | Including, without limitation, the scenarios of financial credit, business-cooperation due diligence, investment, financing and M&A due diligence, ESG rating and green finance. Includes: key technologies, patents and R&D data (such as research investment, core technological achievements and application directions); production process flows, parameters of major technical equipment, and operation and maintenance data of large-scale equipment; supply-chain core capability information (such as supplier lists, procurement of key resources, and the layout of production, supply and sales); data involving enterprises’ core competitive factors; etc. | |
| 3. Data reflecting biotechnology research, development and application; reflecting ethnic-group characteristics or genetic information; bearing on major sudden infectious diseases or animal and plant epidemics; bearing on biological laboratory safety; usable to manufacture biological weapons or carry out bioterrorist attacks; or bearing on invasive alien species and biodiversity. | Including, without limitation, the scenarios of financial credit, business-cooperation due diligence, investment, financing and M&A due diligence, ESG rating and green finance. Includes: data indirectly reflecting an enterprise’s engagement in biotechnology research and application, such as vaccine development, genetic engineering, microbial strain development, pathogenic-microorganism testing and animal and plant breeding; data representing licenses to conduct laboratory research, pathogenic-microorganism operations or biological R&D and production, such as laboratory accreditation (CNAS certification), high-level biosafety laboratory (P3/P4) qualifications, veterinary-drug production licenses, animal and plant quarantine licenses and GMO biosafety certificates; data that directly reveals an enterprise’s core biotechnology development capabilities, such as patents and research results it has applied for or holds (such as gene-editing technologies, improvement of vaccine strains and pathogenic-microorganism detection processes); data on regulatory penalties or notifications received in the production, testing, use or disposal of pathogenic microorganisms, animal and plant pest control, or vaccine quality and safety; etc. | |
| 4. Data in enterprise credit information reflecting the health and physiological condition of national or regional populations, bearing on disease transmission and prevention, or bearing on food and drug safety. | Including, without limitation, the scenarios of financial credit, business-cooperation due diligence, investment, financing and M&A due diligence, ESG rating and green finance. Includes: administrative inspection results, penalty records or rectification notices concerning enterprises in the fields of drug quality, food safety and public-health services (such as failed product sampling, unlawful additives, false advertising and vaccine-distribution management deficiencies); licensing qualifications, regulatory records and R&D progress of enterprises engaged in maternal and infant food, foods for special medical purposes (formulated for persons with serious diseases or specific nutritional needs), rare-disease drugs and vaccine development; information on enterprises engaged in new-drug development, vaccine development, development of foods for special medical purposes and health big-data analysis, where the disclosure of project names, partners, patent abstracts and the like in credit systems or IP publicity systems could be used to infer core technologies and principal disease research directions; data on the scale of supply and demand for disease-prevention supplies (drugs, test reagents, masks, disinfection products and the like) in a given region; etc. | |
| 5. Data bearing on the security of overseas energy resources, maritime strategic passages, and overseas citizens and legal persons, or usable to sabotage China’s participation in international economic, trade and cultural exchange or to impose discriminatory prohibitions, restrictions or similar measures on China. | Including, without limitation, the scenarios of financial credit, business-cooperation due diligence, investment, financing and M&A due diligence, ESG rating and green finance. Includes: information revealing the specific overseas resource layout and scale of Chinese enterprises, such as project cooperation or bidding for overseas mineral, oil and gas field development and infrastructure construction; information in enterprises’ foreign-trade or industry reports on the procurement sources, transport routes, destinations and import–export volumes of commodities such as crude oil, natural gas, rare earths, minerals and special metals; information on cultural, educational or media enterprises reflecting the scale, content and fund flows of their cooperation with overseas academic institutions, cultural institutions and media platforms; etc. | |
| 6. Data in enterprise credit information that could cause public-safety accidents or affect citizens’ lives, or could trigger mass incidents or affect group emotions and perceptions. | Including all scenarios. Includes: production and operation data involving hazardous chemicals, special equipment, large infrastructure and environmental emissions (such as chemical production processes, hazardous-goods storage locations and safety protection measures); product information bearing on public health (such as food and drug production and test data and medical-device clinical-trial information); work-safety management and accident early-warning data; monitoring data of major equipment and facilities (such as electricity, railway, communications, energy pipelines and other critical infrastructure); information on large-scale layoffs or labor disputes and large wage arrears (which could trigger mass protests); public-opinion and handling information on major environmental pollution incidents, serious product-quality accidents and public events; data on enterprises’ socially controversial business decisions (large price adjustments, large-scale demolition or relocation projects and the like) and their potential public-opinion impact; etc. | |
| 7. Data usable by other countries or organizations to launch military strikes against China, or reflecting China’s strategic reserves, emergency mobilization and combat capabilities, such as geographic data meeting certain precision indicators or data relating to the capacity and reserves of strategic materials. | Including all scenarios. Includes: information that may be disclosed on the annual capacity, inventory scale and sales destinations of enterprises engaged in the development or reserve of national strategic mineral resources such as oil, natural gas, coal, rare earths, uranium, titanium and lithium, or in the manufacture of dual-use alloys and aerospace-grade materials; information on, or associated industry-regulatory information about, enterprises in the national grain-reserve system and the reserve and processing of important agricultural products (such as wheat, soybeans and corn), where storage capacity, annual purchase or processing volumes and similar data could reflect local or national grain-security reserves; information on dual-use enterprises (in the aviation, aerospace, shipbuilding, ordnance, electronic-information and other fields) which, if principal suppliers, procurement amounts and cooperation contracts are disclosed, could reveal key links of China’s defense-industry system and dependence on principal raw materials; basic information or business scope of military–civilian fusion and defense-supporting enterprises directly marked as defense-industry support, undertaking defense research projects or weapons and equipment research and production, which could significantly reveal the structure of China’s defense-industry system and combat-support capability; etc. | |
| 8. Other data prescribed by laws, administrative regulations and departmental rules that could endanger or affect national political, territorial, military, economic, cultural, social, scientific and technological, ecological, resource, nuclear-facility, overseas-interest, biological, space, polar, deep-sea or other security. | Including all scenarios. | |
| Personal information | 9. Provision abroad, cumulatively from January 1 of the current year, of the personal information (excluding sensitive personal information) of 2 million or more corporate senior executives, shareholders, actual controllers, core team members or beneficial owners. | Limited to the scenarios of financial credit, business-cooperation due diligence, and investment, financing and M&A due diligence. Limited to the following data items: name, gender, age, date of birth, nationality, ethnicity, native place, residence, region, personal telephone number, email address, subscribed capital contribution, shareholding, share increases and decreases, nature of shareholding, ultimate beneficial shareholding, amount of frozen equity, total pledged equity, market value of pledged equity, education, work experience, position, tenure, business affiliations, equity freezes, equity pledges, pledged equity, administrative penalties, tax violations, handling of violations, inquiry and valuation, shareholder information, and information on the enterprise’s key personnel. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
| 10. Provision abroad, cumulatively from January 1 of the current year, of the personal information of 1 million or more individuals or the sensitive personal information of 10,000 or more individuals. | Scenarios other than those covered by item 9. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
(2) List of data requiring filing of a standard contract for the export of personal information or personal information protection certification
| Data category | Data sub-category | Basic characteristics and description |
|---|---|---|
| Personal information | 11. Provision abroad, cumulatively from January 1 of the current year, of the personal information (excluding sensitive personal information) of 500,000 or more but fewer than 2 million corporate senior executives, shareholders, actual controllers, core team members or beneficial owners. | Limited to the scenarios of financial credit, business-cooperation due diligence, and investment, financing and M&A due diligence. Limited to the data items listed in item 9. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
| 12. Provision abroad, cumulatively from January 1 of the current year, of the personal information of 100,000 or more but fewer than 1 million individuals, or the sensitive personal information of fewer than 10,000 individuals. | Scenarios other than those covered by item 11. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
Notes:
-
This list applies to enterprises, public institutions, organizations, associations and other entities carrying out enterprise credit-information services within the Guangxi FTZ.
-
“Enterprise credit information” in this list is the collective term for information and data of all kinds relating to an enterprise’s operations, finance, technology, compliance, risk management, investment and financing, international cooperation and other fields in its establishment, operation, management and external business activities.
Sector 3: Live-Streaming Cross-Border E-Commerce
(1) List of data requiring a data export security assessment
| Data category | Data sub-category | Basic characteristics and description |
|---|---|---|
| Important data | 1. Data reflecting the characteristics of China’s language and script, history, customs and ethnic values. | Including, without limitation, the scenarios of live-stream selling, live-room operation, host training and copywriting. Includes: teaching content in host training, spoken or commentary scripts, product details and cultural background information and the like, which if systematically collected, edited or distorted in dissemination could adversely affect China’s cultural image and social stability; etc. |
| 2. Data reflecting economic operation or financial activity at the aggregate level or in key fields, bearing on industrial competitiveness, capable of causing public-safety accidents or affecting citizens’ lives, or capable of triggering mass incidents or affecting group emotions and perceptions. | Including, without limitation, the scenarios of live-stream selling, live-room operation, host training and copywriting. Includes: undisclosed statistical data, trade secrets of key enterprises, and major events, hot-button incidents and sensitive topics (such as food and drug price rises and the distribution of livelihood subsidies) contained in teaching content, spoken or commentary scripts in host training; etc. | |
| 3. Other data prescribed by laws, administrative regulations and departmental rules that could endanger or affect national political, territorial, military, economic, cultural, social, scientific and technological, ecological, resource, nuclear-facility, overseas-interest, biological, space, polar, deep-sea or other security. | Including all scenarios. | |
| Personal information | 4. Provision abroad, cumulatively from January 1 of the current year, of the personal information (excluding sensitive personal information) of 2 million or more individuals. | Limited to the scenarios of live-stream selling, cross-border delivery, host management and host training. Limited to the following data items: shipper’s name, shipping address, shipping time, shipper’s contact details, goods name, goods quantity, order number, host’s name, host’s gender, host’s age, host’s contact details, product categories sold, host’s image photographs, etc. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
| 5. Provision abroad, cumulatively from January 1 of the current year, of the personal information (excluding sensitive personal information) of 1 million or more individuals, or the sensitive personal information of 10,000 or more individuals. | Scenarios other than those covered by item 4. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
(2) List of data requiring filing of a standard contract for the export of personal information or personal information protection certification
| Data category | Data sub-category | Basic characteristics and description |
|---|---|---|
| Personal information | 6. Provision abroad, cumulatively from January 1 of the current year, of the personal information (excluding sensitive personal information) of 100,000 or more but fewer than 2 million individuals. | Limited to the scenarios of live-stream selling, cross-border delivery, host management and host training. Limited to the data items listed in item 4. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
| 7. Provision abroad, cumulatively from January 1 of the current year, of the personal information (excluding sensitive personal information) of 100,000 or more but fewer than 1 million individuals, or the sensitive personal information of fewer than 10,000 individuals. | Scenarios other than those covered by item 6. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
Notes:
-
This list applies to enterprises, public institutions, organizations, associations and other entities carrying out live-streaming cross-border e-commerce within the Guangxi FTZ.
-
This list applies to the important data and personal information involved in scenarios such as live-stream selling, live-room operation, cross-border delivery, host management, host training and copywriting.
Sector 4: Overseas Audio-Visual Production and Distribution
(1) List of data requiring a data export security assessment
| Data category | Data sub-category | Basic characteristics and description |
|---|---|---|
| Important data | 1. Data capable of triggering mass incidents or affecting group emotions and perceptions, which after aggregation could be used for big-data analysis and could, at the macro level, profile in depth the ideological dynamics of groups, social public opinion, and the preferences and values of specific groups. | Including, without limitation, the scenarios of overseas audio-visual content planning and data analysis. Includes: de-identified playback-behavior analysis, geographic distribution, overview of social relationships, massive user-interaction relationships, audience profiles, placement strategies, placement-point distribution, etc. |
| 2. Data reflecting the characteristics of China’s language and script, history, customs and ethnic values. | Including, without limitation, the scenarios of overseas audio-visual content planning, production and filming. Includes: undisclosed historical archives and documentary materials; scans of ancient books, rubbings and original manuscripts not yet digitized or not yet released to the public; corpora of ethnic-minority languages (especially endangered languages), audio recordings and large-scale dialect speech databases; records of oral culture and oral history (especially those reflecting unique folk customs, religious culture and social organization); core steps in the making of ethnic musical instruments; proprietary formulas of traditional brewing or handicraft techniques, original records and oral accounts of ethnic festivals and major ceremonial activities, secret manuscripts passed down within traditional opera schools and troupes, unpublished scores and scripts; unpublished archaeological site survey data, site coordinates, identification of unearthed relics and related research conclusions, laboratory test data; etc. | |
| Personal information | 3. Provision abroad, cumulatively from January 1 of the current year, of the personal information (excluding sensitive personal information) of 2 million or more producers, directors, executive producers, actors, lighting technicians, make-up artists, composers, editors, script supervisors, cinematographers, prop masters, art directors, copyright holders, agents or distributors. | Limited to the scenarios of overseas audio-visual content production and filming, distribution and screening, copyright trading, contract signing and media publicity. Limited to the following data items: name, gender, contact details, age, curriculum vitae, portfolio. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
| 4. Provision abroad, cumulatively from January 1 of the current year, of the personal information (excluding sensitive personal information) of 1 million or more individuals, or the sensitive personal information of 10,000 or more individuals. | Scenarios other than those covered by item 3. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
(2) List of data requiring filing of a standard contract for the export of personal information or personal information protection certification
| Data category | Data sub-category | Basic characteristics and description |
|---|---|---|
| Personal information | 5. Provision abroad, cumulatively from January 1 of the current year, of the personal information (excluding sensitive personal information) of 100,000 or more but fewer than 2 million producers, directors, executive producers, actors, lighting technicians, make-up artists, composers, editors, script supervisors, cinematographers, prop masters, art directors, copyright holders, agents or distributors. | Limited to the scenarios of overseas audio-visual content production and filming, distribution and screening, copyright trading, contract signing and media publicity. Limited to the data items listed in item 3. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
| 6. Provision abroad, cumulatively from January 1 of the current year, of the personal information (excluding sensitive personal information) of 100,000 or more but fewer than 1 million individuals, or the sensitive personal information of fewer than 10,000 individuals. | Scenarios other than those covered by item 5. The number of individuals is counted after de-duplication by natural person; transfers falling within the circumstances of Article 3, Article 4, Article 5(1)(1)–(3) and Article 6 of the Provisions on Promoting and Regulating Cross-border Data Flows are not counted toward the cumulative total. |
Notes:
-
This list applies to enterprises, public institutions, organizations, associations and other entities carrying out overseas-oriented audio-visual production and distribution within the Guangxi FTZ.
-
This list applies to the important data and personal information involved in business scenarios such as overseas audio-visual content planning, data analysis, production and filming, distribution and screening, copyright trading, contract signing and media publicity.