Article 39 A personal information processor who is to provide personal information of any individual to a recipient outside the territory of the People's Republic of China shall inform the individual of the organizational or personal name and contact information of the overseas recipient, the purpose and method of the processing, and the type of personal information involved, as well as the way for the individual to exercise his/her rights provided for by the Law against the overseas recipient, and obtain specific consent from the individual. Article 40 Critical information infrastructure operators, or personal information processors whose processing of personal information reaches the threshold amount prescribed by the national cyberspace authority, shall store within the territory of the People's Republic of China the personal information collected or generated by them within the territory of the People's Republic of China. Where it is necessary to provide such information to an overseas recipient, a security assessment organized by the national cyberspace authority shall be passed; if a security assessment is not required as provided by law, administrative regulations or the national cyberspace authority, such provision shall prevail. Article 41 Competent authorities of the People's Republic of China will, in accordance with the relevant law or international treaty or agreement concluded or acceded to by the People's Republic of China or in accordance with the principles of equality and reciprocity, handle requests for the provision of any personal information stored within China made by a foreign judicial or law enforcement body. Without the approval of competent authorities, personal information processors shall not provide any personal information stored within the territory of the People's Republic of China to a foreign judicial or law enforcement body. Article 42 Any organization or individual outside China engaged in any activity of processing of personal information that infringes on the personal information rights and interests of any citizen of the People's Republic of China, or endangers the national security or public interests of the People's Republic of China, may be included in a list of restricted or prohibited recipients for the provision of personal information, be publicly announced, and be restricted or prohibited from being recipients for the provision of personal information or subject to any other measure by the national cyberspace authority. Article 43 Any country or region that takes any discriminatory prohibition, restriction, or any other such measure against the People's Republic of China in respect of personal information protection may be subject to reciprocal measures taken by the People's Republic of China depending on the actual situation. Chapter IV Rights of Individuals in Activities of Processing of Personal Information Article 44 Individuals have the right to be informed and right to decide on the processing of their personal information, as well as the right to restrict or deny another person from the processing of their personal information, unless otherwise provided by law or administrative regulations. Article 45 Individuals have the right to access or make copies of their personal information from a personal information processor, except where the first paragraph of Article 18 or Article 35 of this Law is applicable. Where individuals request to access or make copies of their personal information, the personal information processor requested shall provide it in a timely manner. Where individuals request to transfer their personal information to a personal information processor designed by them who meets the conditions prescribed by the national cybersecurity authority, the personal information processor requested shall provide a way for the transfer. Article 46 Where individuals discover that their personal information is incorrect or incomplete, they have the right to request personal information processors to correct or complete their personal information. Where individuals request a personal information processor to correct or complete their personal information, the personal information processor requested shall check the personal information and correct 7