On December 13, the Cyberspace Administration of China (CAC) and the Innovation, Technology and Industry Bureau of Hong Kong (ITIB) jointly formulated the Implementation Guidelines for Standard Contract for the Cross-boundary Flow of Personal Information within the Guangdong-Hong Kong-Macao Greater Bay Area (Mainland, Hong Kong) (the "Guidelines"). 

The Guidelines comprise 15 articles, with Standard Contract for Cross-boundary Flow of Personal Information within the Guangdong-Hong Kong-Macao Greater Bay Area (Mainland, Hong Kong) being attached. According to the Guidelines, personal information processors and recipients in the Greater Bay Area may, in accordance with the requirements of the Guidelines, conduct cross-boundary flow of personal information between Mainland cities within the Greater Bay Area and Hong Kong by entering into the Standard Contract. The Guidelines also clarify that, if there are any changes to the cross-boundary transfers of personal information in terms of purpose, scope, categories, means, or the recipient's use and means of personal information processing, or the retention period is extended, or there are any other circumstances that affect or may affect the rights and interests of in relation to personal information, the personal information processer shall conduct a personal information protection impact assessment afresh, enter into a supplemental agreement or a new Standard Contract, and conduct the corresponding filing procedures.

(Source: Cyberspace Administration of China)