GB/T 46068-2025 cross-border data related standard effective 1 March 2026

The Standards Administration / SAMR notice 《数据安全技术 个人信息跨境处理活动安全认证要求》国家标准正式发布 (page updated 29 September 2025), opened 20 September 2026, states that recommended national standard GB/T 46068—2025 has been approved and takes effect on 1 March 2026. The notice frames it as the first national standard in the personal-information cross-border security-management field and summarises that it sets principles, basic requirements, and subject-rights safeguards for parties in cross-border personal-information processing.

Separately, SAMR & CAC Announcement No. 53 of 2025 (document date 12 December 2025; published 25 December 2025) states that, from the announcement’s release date, the certification reference standards for cross-border processing activities under the personal-information protection certification implementing rules change to GB/T 35273 and GB/T 46068, implementing the Personal Information Outbound Certification Measures.

Operator table

UA teams that export Mainland China event or device data for attribution should record which legal transfer path they rely on (security assessment, standard contract, or certification) and treat GB/T 46068 as the certification technical basis, not as a substitute for the legal path choice.

Download the implementation card.

Research checked 20 September 2026. Local draft; human editorial review pending.