China’s Personal Information Protection Law (个人信息保护法; the PIPL) lays out strict limitations on cross-border transfers of personal information (PI). Finally, after more than nine months after the PIPL came into effect, three new regulatory developments will provide guidance on the administrative procedures and detailed rules to implement the cross border transfer rules. The new regulatory developments include: • the issuance of measures to govern the requirement for and conduct by the Cyberspace Administration of China (CAC) of data export security assessments, which will come into effect on September 1, 2022; • CAC’s publication of a draft standard contract for PI exports and draft implementing regulations; and • the promulgation of final standards for the conduct of PI security certifications. This alert briefly reviews the key elements of PIPL’s regulation of PI exports and the implications of these significant developments.