On September 11, the Cyberspace Administration of China and the Economic and Technological Development Bureau of the Macao Special Administrative Region jointly developed the Implementation Guidelines on the Standard Contract for Cross-boundary Flow of Personal Information Within the Guangdong-Hong Kong-Macao Greater Bay Area (Mainland, Macao) (the "Guidelines"), which took effect on the date of issuance.

According to the Guidelines, enterprises or institutions in the nine Mainland cities (Guangzhou, Shenzhen, Zhuhai, Foshan, Huizhou, Dongguan, Zhongshan, Jiangmen, and Zhaoqing) of the Greater Bay Area and those in Macao may opt to conduct the cross-boundary flow of personal information and data within the Greater Bay Area by entering into the Standard Contract for Cross-boundary Flow of Personal Information within the Guangdong-Hong Kong-Macao Greater Bay Area (Mainland, Macao) (hereinafter referred to as the "Contract"). The Contract must be filed with the Guangdong Provincial Cyberspace Administration or Macao's Office for Personal Data Protection. It exempts personal information processors from limitations on the quantity of personal information involved in cross-boundary flows and simplifies the content of personal information protection impact assessments. The Contract also stipulates the contractual obligations and responsibilities of personal information processors and recipients, the rights of personal information subjects, contract termination, liability for breach of contract, and dispute resolution methods.

(Source: Cyberspace Administration of China)