Transfer of personal information and important data[i] collected or generated by critical information infrastructure operators (hereinafter referred to as the ‘CIIOs’) during their operations within the territory of China to overseas recipients shall be subject to security assessment.