Don't casually put users' information outside China; sending it abroad has legal conditions and head-count thresholds
- Moderate value
- Evidence A
- Keeps you free
- Free
- Takes some hours
- No willpower
In plain words
Sending the information of users in China to machines abroad counts as exporting it. Having your server abroad does not mean the data didn't leave. To export it you must take one of four paths: a security assessment by the cyberspace administration (网信部门), certification by a professional body, signing a standard contract, or another route provided by law. You must also tell users who abroad receives the information and what it will be used for, and ask them separately about this one matter.
Mentioned in
Translated from the Chinese original. Original book, section 26, tip 10. This section describes legal rules, mostly mainland China’s. It is general information, not legal advice; for your own case, talk to a lawyer. Content may be out of date and rules differ by place. When you actually deal with an agency, a doctor or a court, follow what local officials, doctors and lawyers tell you. Disclaimer