China Proposes Significant Amendments to National Standard on Personal Information Protection
Summary
China has proposed major amendments to its national standard on personal information protection, potentially tightening requirements for cross-border data transfers, consent mechanisms, and data localisation. The amendments have implications for multinational organisations operating in China, including Australian and NZ companies with Chinese supply chains or operations.
Key Details
- Date: 2026-07-30
- Jurisdiction: China
- Action: Proposed amendments to national PI protection standard
- Key areas: Cross-border data transfers, consent mechanisms, data localisation
- Source: IAPP
- Reliability: Tier 2/4 — Established cyber journalism / legal analysis
Significance
The amendments are relevant to Australian companies with Chinese operations or supply chains, and to New Zealand organisations dealing with Chinese entities. The tightening of data localisation requirements could increase compliance costs and operational complexity for multinational firms.
Geopolitical Context
These amendments are part of an accelerating regulatory fragmentation trend globally — alongside the EDPB's DPF review request, Singapore's AI guidelines, and other developments creating an increasingly complex global compliance environment.
Related
- Cyber Digest 2026 08 04
- Edpb Requests Review Of Eu Us Data Privacy Framework Following Trump V Slaughter — Parallel regulatory development