China: Cybersecurity

In 2025, China took several notable steps to strengthen its data privacy and cybersecurity regulatory framework, finalizing compliance audit requirements, operationalizing the cross-border data transfer certification regime, and ...

In 2025, regulatory oversight in China's consumer sector underwent a series of developments, with authorities placing renewed emphasis on the safety and quality of consumer goods and services.

The Cyberspace Administration of China (CAC) has issued the Announcement on Reporting Compliance Audit of Minors' Personal Information Protection, launched an online reporting system...

2025年10月28日，第十四届全国人民代表大会常务委员会第十八次会议表决通过了《关于修改〈中华人民共和国网络安全法〉的决定》，修订后的《网络

The 2025 revision of China's Cybersecurity Law (the Amendment) was adopted on October 28, 2025, and will take effect on January 1, 2026.

Measures for the Certification of Cross-Border Provision of Personal Information.

The State Administration for Market Regulation and the Standardization Administration of China have jointly issued a new national standard applicable to companies conducting business in China, GB/T 45574-2025, Data Security Technology – Security Requirements for Processing of Sensitive Personal Information (the Standard), which will take effect on November 1, 2025.

China's primary data regulator, the Cyberspace Administration of China (CAC), released two sets of Q&As with respect to exporting data from China, one in April and one in May.

Facial recognition technology has become increasingly prevalent among companies operating in China, used for everything from unlocking mobile devices to paying bills and accessing buildings.