Ordering on cross-border platforms, storing photos via transnational apps… Personal information is quietly flowing across borders, a matter that concerns individual rights and interests, international economic and trade order, and national judicial jurisdiction. Protecting personal information is the responsibility of every individual.
The Inaugural Guangdong-Hong Kong-Macao Greater Bay Area (GBA) Personal Information Protection Exchange was recently held in Zhuhai. Approximately 200 guests attended, including representatives from Guangdong’s cyberspace administration authorities, the Office for Personal Data Protection of the Macao Special Administrative Region (SAR) Government, the Office of the Privacy Commissioner for Personal Data of Hong Kong, the Digital Policy Office of the Hong Kong SAR Government, as well as relevant government departments, industry associations, key enterprises, authoritative experts, and media representatives from the Greater Bay Area. Attendees engaged in in-depth exchanges and established a regular communication and enhanced coordination mechanism among Guangdong, Hong Kong, and Macao focusing on cross-border data flow and personal information protection, providing impetus for enterprises’ high-quality and compliant operations.
Collaboratively Exploring Ways to Enhance Personal Information Protection in the Greater Bay Area
Promoting Efficient and Orderly Data Flow
“Deepening comprehensive governance of cyberspace security and strengthening personal information protection” is not only a national strategy but also a public expectation. As one of China’s most open and economically dynamic regions, the Guangdong-Hong Kong-Macao Greater Bay Area serves as both a frontier for digital economy innovation and a core hub for cross-border flow of data elements, making it a unique “test bed” for cross-border data movement.
In recent years, the Cyberspace Administration of China has issued a series of regulations. To promote the safe and orderly cross-border flow of personal information in the GBA, significant progress has been made in areas such as the Memorandum of Cooperation on Cross-Border Data Flow in the Guangdong-Hong Kong-Macao Greater Bay Area, standard contracts and implementation guidelines for cross-border personal information flow between the mainland and Hong Kong, and between the mainland and Macao, as well as personal information outbound certification. These measures have not only strengthened the national data security barrier but also provided institutional space for enterprises through flexible filing mechanisms, advancing the dual balance of “security and development.”
With the theme “Safeguarding Personal Information, Building a Secure Bay Area,” the Inaugural Exchange saw representatives from relevant departments, institutions, and social organizations in Guangdong, Hong Kong, and Macao share practical experiences on cross-border personal information flow in the GBA. The three regions established a regular communication and enhanced coordination mechanism based on the “Guangdong-Hong Kong-Macao Greater Bay Area Personal Information Protection Exchange.”
In his speech, Wang Minwei, Deputy Director of the Cyberspace Administration of Guangdong Province, stated that in recent years, Guangdong has strictly implemented national requirements, actively promoted policy advocacy and interpretation, and provided consulting services. It has steadily carried out work such as security assessments for data outbound transfers and filing of standard contracts for personal information outbound transfers. Guangdong is exploring a “Bay Area solution” that can both reduce enterprises’ cross-border compliance costs and effectively ensure the safe and orderly cross-border flow of personal information, promoting the high-quality development of the GBA. He emphasized that Guangdong is actively collaborating with relevant departments in Hong Kong and Macao to discuss the current status and existing issues of personal information protection, and to negotiate and introduce convenient measures to facilitate the compliant flow of personal information among the three regions.
Wang Genghui, Chairman of the Guangdong Provincial Association for Network Data Security and Personal Information Protection, noted in his speech that the association will play a bridging role in promoting policy communication, standard mutual recognition, and experience sharing in personal information protection among Guangdong, Hong Kong, and Macao. Focusing on the characteristics of the Bay Area and frontline industries, it will provide targeted compliance guidance, technical consulting, and education and training for enterprises. The association will also cooperate with various stakeholders to conduct policy publicity, build social consensus, enhance public security awareness, and promote the construction of a diversified and collaborative governance ecosystem for personal information protection.
“Cross-border data flow has become a key link for GBA enterprises to ‘go global’ and for innovation to ‘thrive,'” said Liang Jiezhi, Deputy Director of the Office for Personal Data Protection of the Macao SAR Government, in her speech. She emphasized the need to ensure that residents’ personal information receives “equivalent protection” during cross-border flow, law-abiding enterprises operate under “a single set of predictable rules” across the three regions, and regulatory authorities achieve “synchronized responses” when handling cross-border cases. The core lies in establishing a collaborative mechanism for personal information protection among Guangdong, Hong Kong, and Macao, which is not only the work of regulatory authorities but also requires the participation of GBA enterprises and industry associations.
Wang Yanyuan, Assistant Privacy Commissioner for Personal Data of Hong Kong, mentioned in her speech that the “Standard Contract for Cross-Border Flow of Personal Information in the Guangdong-Hong Kong-Macao Greater Bay Area (Mainland and Hong Kong)” has significantly reduced enterprises’ compliance costs and effectively promoted the safe flow of personal information within the GBA as a convenient measure. To assist Hong Kong institutions in understanding and applying the standard contract, the Office has issued supporting guidelines and participated in multiple seminars.
Chan Sai-cheong, Chief Systems Manager of the Digital Policy Office of the Hong Kong SAR Government, stated in his speech that over the past two years, the introduction of standard contracts for cross-border personal information flow among Guangdong, Hong Kong, and Macao has marked a historic step, clarifying protection responsibilities and obligations and providing a clear path for compliant, safe, and convenient data flow within the GBA. These standard contracts are important cornerstones for building a joint cyberspace security defense line among the three regions. He expressed anticipation for continued cooperation with Guangdong, Hong Kong, and Macao in cyberspace security and personal information protection, adhering to “balancing development and security” to safeguard the cross-border flow of personal information in the GBA.
Lin Xiaodong, Director of the Cyberspace Administration of Zhuhai City and Director of the Zhuhai Cloud Smart City Construction and Management Bureau, noted in his speech that with the joint efforts of the Cyberspace Administration of China, the Cyberspace Administration of Guangdong Province, and relevant departments in Hong Kong and Macao in recent years, the implementation guidelines for the two standard contracts have been successively launched. These guidelines have refined and creatively addressed the GBA’s data flow scenarios where personal information “leaves the mainland but not the country, or leaves the region but not the Bay Area” under the background of “one country, two systems, and three legal jurisdictions,” making the GBA the most convenient region in China for cross-border data flow. This year, Zhuhai has fully utilized its special economic zone legislative power to promulgate and implement the “Regulations of Zhuhai Special Economic Zone on the Development and Utilization of Data Resources,” with pilot areas innovatively referencing the negative list for data outbound transfers applicable to free trade test zones. The policy combination of national data outbound policies + the two GBA guidelines + Zhuhai’s data regulations has made Zhuhai Special Economic Zone the mainland city with the richest cross-border data policies and the most convenient data flow. Taking the opportunity of the Inaugural Exchange and the launch of China’s first pilot program for green labels for personal information protection in public places, Zhuhai will build a leading domestic and internationally aligned level of personal information protection, further consolidating and enhancing its first-class international living environment, talent environment, and business environment.
China’s First Pilot Program for Green Labels for Personal Information Protection in Public Places Launched in Zhuhai
Bay Area Office of the Provincial Association for Data Security and Personal Information Protection Inaugurated
Focusing on “three-region linkage to promote compliance, cross-border coordination to build barriers, and joint standard-setting to strengthen the ecosystem,” the Exchange saw the Guangdong Provincial Association for Network Data Security and Personal Information Protection, in conjunction with multiple units, launch a pilot program for “green labels” for personal information protection in public places in Zhuhai. As China’s first initiative of its kind, the “green label” is a systematic compliance assessment and trust certification mechanism tailored for complex public place scenarios. It is not only a mark but also an innovative governance tool integrating legal compliance, technical protection, and management systems.
At the Exchange, the “Several Guidelines for Personal Information Protection in Public Places of Zhuhai City” was also released, providing guidance and standards for promoting personal information protection in public places in the region.
Additionally, the Bay Area Office of the Guangdong Provincial Association for Network Data Security and Personal Information Protection was inaugurated to further strengthen its ability to connect the Bay Area and serve the industry.
Key GBA Enterprises Jointly Sign Personal Information Protection Initiative
Thematic Exchanges on “Personal Information Protection” Experience for Business Overseas Expansion
At the event, representatives of key GBA enterprises jointly signed a “Personal Information Protection Initiative.” Participating enterprises include China Mobile, China Telecom, China Unicom, BYD, GAC Group, Zhuhai Science and Technology Industry Group, CVTE, Kingsoft Office, OPPO, vivo, Yuanli Technology, Sangfor, Haiyun’an, Jingyuan Security, Bank of China Zhuhai Branch, Bank of Communications Zhuhai Branch, Funwan Technology, Gree Electric Appliances, Little Genius, etc., covering multiple fields such as operators, AI technology, data security, finance, and education, and involving key links of the entire industrial chain including data collection, circulation, storage, and application, with many engaged in data outbound business. Representing enterprises stated that they will act as “practitioners” of compliant protection, “guardians” of security lines, and “respecters” of rights and interests. “A sound compliant ecosystem for personal information protection can not only safeguard the legitimate rights and interests of the public but also enhance enterprises’ competitiveness,” they said, adding that they will work together for the construction of a data security ecosystem in the GBA.
Furthermore, relevant enterprises and experts conducted thematic discussions on cross-border data flow paths and enterprises’ “personal information protection” experiences in overseas expansion.
It is reported that the Inaugural Exchange was hosted by the Guangdong Provincial Association for Network Data Security and Personal Information Protection, with co-organization by Southern Metropolis Daily and the Zhuhai Cyberspace Security Association.
