On 7 July 2022, the Cyberspace Administration of China (CAC) released the Measures on Security Assessment for the Cross-border Transfer of Data (the Measures). As a step in the process of further detailing the mandatory governmental security assessment for transferring data outside Mainland China (Security Assessment), which has been laid out in principle under the PRC Cybersecurity Law, the PRC Data Security Law, and the PRC Personal Information Protection Law (the PIPL), the adoption of the Measures signals a new era for regulating the cross-border transfer of data under PRC law.