Meaning
Administrative contract template issued by the national cyberspace authority provides a legally recognized mechanism for the outbound transfer of personal information. The prc standard contract establishes a uniform set of rights and obligations for the domestic data exporter and the overseas recipient. It is used when the volume of personal data being transferred falls below the statutory thresholds for mandatory government security assessment.
Applying this template ensures that Chinese data protection standards are maintained across national boundaries.
Contractual Structure
The agreement consists of mandatory clauses that cannot be altered or excluded by the contracting parties. It specifies the purpose of the transfer, the types of data being transmitted, and the retention period of the information. Exporters must include provisions that allow Chinese data subjects to enforce their rights directly against the overseas recipient.
This gives the data subjects third-party beneficiary status under Chinese law.
Filing Requirement
Parties must file the executed contract with the local provincial-level cyberspace administration within ten working days of its signing. This filing must be accompanied by a self-assessment report on personal information protection. The filing does not represent a prior administrative licensing procedure, but it permits the regulatory authority to monitor the transfer activities.
Discrepancies between the contract and actual operations can trigger administrative penalties.
Liability Allocation
The domestic exporter and the overseas recipient face joint and several liability for any breach of the contract terms that results in harm to the data subjects. This means that data subjects can seek full compensation from either party in Chinese courts. The allocation ensures that a domestic remedy remains available to affected citizens.
