Not legal advice. PIPL outbound rules and CAC thresholds change. This page is the HR/employee-data spoke — not the full CBDT roadmap and not a quote of a headcount trigger.
Employee tick-box consent rarely takes HR data out of China by itself. If names, pay, ID numbers, passports or performance sit on a server or vendor outside the PRC, map the flow, run an impact assessment, minimise fields, then pick a live CAC path: standard contract, certification, or security assessment. Thresholds and “important data” tests are versioned — confirm the instruments in force the week you file; do not use a 2022 blog’s headcount. Localise what you can. Write purpose, recipients and retention into both the PIPL file and the labour paperwork. A works council is usually not a veto; notice and personnel-file rules still apply. Dismissal files sent to HQ are the same export, not a loophole.
Usually yes if the system or admin is outside the PRC.
Is consent enough?
Almost never alone.
Which path?
SCC / certification / assessment — confirm live CAC rules.
ID / biometrics?
Treat as sensitive PI unless counsel says otherwise.
Union veto?
Usually not. Still inform and document.
Full three-path essay?
CBDT roadmap + path-tree pages.
Consent is rarely enough. Full path picker is the CBDT roadmap.
Scope and legal framework
PIPL (outbound / separate consent / sensitive PI). Providing personal information abroad is a regulated act. Separate consent appears in the statute but is not a substitute for a transfer mechanism. Sensitive PI (ID numbers, biometrics, specific identity, medical, etc.) needs a stricter necessity story.
CAC outbound measures (assessment / SCC / certification). Three families exist. Which one you need depends on volume, role (CII), important data and the current implementing rules. Quote the gazette in force — not a memorised headcount from an old webinar.
Labour Contract Law / personnel-file practice. Exporting the file does not erase China labour duties: notice, access, retention. Works-council consultation is not usually a legal block on a PIPL transfer, but skipping employee notice is a separate failure.
Do not sync the whole personnel file because HQ asked.Do not quote stale headcount triggers.
Practical workflow
Works council is usually not a veto. Notice still matters.
List every HR field that leaves China (including vendor admins abroad).
Drop what HQ does not need; keep ID/biometric out of the default sync.
Run the impact assessment and pick the live CAC path.
Sign SCC or complete assessment/certification; align the employment privacy notice.
Control access, retention and leaver off-boarding on both sides.
Legal boundary: Prefer primary statutes, judicial interpretations, and official guidance when making decisions. Where this guide links to city hubs or lawyer listings, verify credentials and engagement terms directly with counsel. Full disclaimer · Request a consultation.
FAQ
Common questions
Quick answers for foreign nationals and employers. Rules vary by city and change over time.
Can a works council or union block the export?
Usually not as a PIPL veto. Labour democratic procedures and notice still need a paper trail.
Are employee IDs and photos sensitive PI?
National ID numbers and biometrics are the classic sensitive set. Ordinary badge photos are fact-specific — default to minimise.
Is this the same as the full data-export roadmap?
No. This page is HR only. Paths and vendor architecture: roadmap and decision tree.
Consultation preparation
What to prepare before contacting counsel
Send a focused first package so counsel can check conflicts, understand scope, and identify urgent deadlines.
A concise timeline and the result you want to achieve.
Names of all parties and affiliates for a conflict check.
Key contracts, notices, correspondence, filings, or decisions.
Known deadlines, preferred language, location, and budget constraints.
Topic counsel
Lawyers relevant to this topic
Review profiles matched to this guide, then request a free initial consultation.
Status shown per profileFree initial consultationTopic-matched shortlist
