On 10 July 2021, the Office of the Central Cyberspace Affairs Commission and the Office of Cybersecurity Review under the Cyberspace Administration of China ("CAC") promulgated the Measures for Cybersecurity Review (the "Review Measures") (Revised Draft for Comments) (the "Draft"). The Draft extends the scope of cybersecurity reviews to data processors ("Processors") engaging in data processing activities that affects or may affect national security, including listing in a foreign country. This article is a preliminary interpretation of the Draft, and analyses its potential impact.