The Cybersecurity Administration of China has circulated for public comment a revised draft of rules governing cross-border transfers of personal information. The draft would partially flesh out the data localisation rules under the 2016 Cybersecurity Law.