In what has the potential to be a petite step towards polishing the data regulatory environment making immense impacts on businesses, China’s cyberspace regulator has uploaded for public consultation a renewed draft law ruling the export of personal information. The fresh rules on the “Measures for the Security Assessment of Data Exports”, which came into effect on Sept 1, 2022, seemed to mark a reversal from a lately hawkish position underpinned by national security considerations, needing practically all private data to be agreed for by the authorities before being exported.