Valid

GB/T 46901-2025Data security technology - Requirements for personal information transfer at the request of the personal information subject (English PDF)

数据安全技术　基于个人请求的个人信息转移要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (13 pages)

Need quotation for your management?

Get a formal quotation for GB/T 46901-2025 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

December 31, 2025

Implementation date

July 1, 2026

Scope

GB/T 46901-2025 is the English-translated version of 数据安全技术　基于个人请求的个人信息转移要求.

GB/T 46901-2025 is the Chinese standard "Data security technology - Requirements for personal information transfer at the request of the personal information subject".

Its scope clause reads: This document specifies the scope of application, prerequisites, procedural requirements, and specific circumstances for the transfer of personal information based on the request of the personal information subject.

Other requirements for shape. This document serves as a guide for personal information processors in responding to requests from personal information subjects to transfer their personal information, and also provides guidance for regulatory authorities and third parties.

This provides a reference for the relevant supervision, management, and evaluation activities of the evaluation agency. Its clauses include terms and definitions.

Found what you need?

Document preview — GB/T 46901-2025

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
1.Scope
2 Normative References
3.Terms and Definitions
4.Abbreviations
5.Transfer Method
5.1 Overview
5.2 Transfer of personal information through the intermediary of the personal information subject
5.3 Transfer of personal information mediated by personal information processors
6.Scope of Application for Personal Information Transfer
6.1 Scope of Information That Can Be Requested for Transfer
6.2 Requirements for the Subject Eligible to Request Transfer
7.Prerequisites for Personal Information Transfer
7.1 Legality Requirements
7.2 Requirements for not infringing upon the legitimate rights and interests of others
7.3 Reasonableness Requirements
8.Basic requirements for personal information transfer
8.1 Basic Process
8.2 Initiation of a Request
8.3 Request Validation
8.4 Request Processing
8.4.1 Responding to Request
8.4.2 Deny Request
8.4.3 Cost of processing the request
8.5 Data Format for Personal Information Transfer
8.6 Exporting Personal Information
8.6.1 Methods for exporting personal information
8.6.2 Security Measures for Exporting Personal Information
8.6.3 Instructions for exporting personal information
8.7 Importing Personal Information
8.7.1 Legality Requirements
8.7.2 Restrictions on the Purpose of Processing Others' Information
9 Requirements for the transfer of personal information through intermediaries (7)
10 Requirements for the transfer of personal information through intermediaries (7)
11.Requirements for Automated Processing of Personal Information Transfer
12 Requirements for processing personal information transfer requests from minors under the age of fourteen
13 Requirements for handling requests involving the transfer of personal information to third parties
14 Requirements for processing requests involving the transfer of personal information across borders
References

1 Scope

This document specifies the scope of application, prerequisites, procedural requirements, and specific circumstances for the transfer of personal information based on the request of the personal information subject.

Other requirements for shape.

This document serves as a guide for personal information processors in responding to requests from personal information subjects to transfer their personal information, and also provides guidance for regulatory authorities and third parties.

This provides a reference for the relevant supervision, management, and evaluation activities of the evaluation agency.

2 Normative references

The contents of the following documents, through normative references within the text, constitute essential provisions of this document. Dated citations are not included.

For references to documents, only the version corresponding to that date applies to this document; for undated references, the latest version (including all amendments) applies.

This document.

GB/T 25069-2022 Terminology for Information Security Technologies

GB/T 35273-2020 Information Security Technology - Personal Information Security Specification

3 Terms and Definitions

The terms and definitions defined in GB/T 25069-2022 and GB/T 35273-2020, as well as the following terms and definitions, apply to this document.

3.1

A data subject requests that the processor handling their personal information transfer the processed information to another entity designated by the data subject.

The process of personal information processors.

3.2

New data related to an individual, derived from the analysis, calculation, and processing of personal information.

Note. This data may differ from the original data, but it is still personal information and retains its personal association characteristics.

3.3 Requester

The entity that initiates the request for the transfer of personal information.

Note. This includes the individual who owns the personal information, the individual's guardian, and the trustee who initiates the transfer request on behalf of the individual.

3.4 structured

A data organization method that has certain rules, formats, or patterns, enabling software to extract specific elements of the data.

Note 1.In a spreadsheet, data is represented in rows and columns.

Note 2.Structured data is typically composed of predefined schemas, templates, fields, etc., where each data element has a specific meaning and type, and follows...

Specific formats, conventions, and standards are used to facilitate automatic processing and interpretation by programs such as computers.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 13 pages — is available in the English PDF.

Referenced standards

Normative references

How to Download GB/T 46901-2025

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.