How it works in practice
Treat classification as a cross-functional project (legal, security, business owners). Do not wait for a single national catalogue to cover every industry. When export is needed, use the CBDT roadmap and path tools; when in doubt, isolate high-risk datasets in China-region systems.
FAQ
Is important data the same as sensitive personal information?
No. Sensitive PI is a PIPL concept about individuals; important data is a national-security/economic-risk concept under the DSL framework.
Does putting data in a China cloud solve everything?
Localization can help for some risks but does not remove access-control, sharing, or PIPL duties. Overseas admin access may still be a transfer.