The entry into force of China's Personal Data Protection Law on 1 November, 2021 created a statutory comprehensive data protection system from the existing patchwork of regulations, including cross-border personal data transfers. China's PIPL has been considered as one of the most stringent data privacy laws in the world. Indeed, despite its apparent inspiration from the European GDPR, it contains solutions for cross-border data transfers that are unknown to it and much more demanding. However, the latest Regulation of the Cyberspace Administration of China (CAC) on Promoting and Regulating Cross-border Data Flows which were announced and entered into force on 22 March 2024, liberalize the rules for transfers of personal data outside China. It introduces exceptions to cross-border data transfer mechanisms similar to derogations under the GDPR. They also reduce the volume of personal data which, when exceeded, requires the use of certain transfer mechanisms. The amendment simplifies the rules for transferring data outside China by foreign companies operating also in China and by Chinese exporters. Its purpose is, among others, facilitating cross-border e-commerce, cross-border payments, and transferring employee personal data abroad within corporate groups. The topic of the article is Chinese data transfer regulations and their comparison to GDPR from a normative perspective.