On 3 April 2026, the Cyberspace Administration of China (“CAC”) issued the Draft Provisions on Simplified Measures for Personal Information Protection for Small-Scale Data Controllers (the “Draft ...