The article describes in detail the New Regulations which introduce exemptions to the existing filing obligations for outbound data transfer, including (1) absolute exemptions, which are exemptions applicable to all regulatory procedures for outbound data transfer, and (2) exemptions from the obligation to file a security assessment, i.e., the New Regulations have modified the thresholds mandating the filing of a security assessment and if such thresholds are not met, the data processor still needs to conduct standard contract filing or PI (Personal Information) protection certification. The Regulation leaves space for special policies in Free Trade Zones.
The whole article you can find here: Albrecht, Daniel, China Releases New Regulation on Cross-border Data Transfers, CRi 2024, 79-84