Data Security Law Articles 21 and 31: important data is set by catalogues, and its export by non-critical-infrastructure handlers follows rules the cyberspace authority makes (Data Security Law of the PRC (adopted 10 June 2021, in force 1 Sept. 2021; Chinese text published by the Cyberspace Administration of China), Arts. 21(1) and 31)
Translation: each region and department sets its own catalogue of important data for its sector and gives listed data key protection, and the export rules for important data collected by handlers other than critical-infrastructure operators are made by the cyberspace authority with the State Council departments. A holder whose records fall in a regulated sector (finance, health, telecoms, mapping, automotive, for example) should check whether its region or sector has listed them as important data, because the exemptions in the 2024 Provisions do not cover important data.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“各地区、各部门应当按照数据分类分级保护制度，确定本地区、本部门以及相关行业、领域的重要数据具体目录，对列入目录的数据进行重点保护。 ... 其他数据处理者在中华人民共和国境内运营中收集和产生的重要数据的出境安全管理办法，由国家网信部门会同国务院有关部门制定。”
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide