These include: Not all companies are allowed to undergo a personal information protection certification for cross-border data transfer. Article 38 of the PIPL offers the following procedures for ...