2026-08-28
The Cybersecurity Review regime applies whenever a Critical Information Infrastructure (CII) operator procures network products or services that may affect national security — and foreign-invested enterprises supplying those products...
2026-08-28
China mandates a data classification and grading (数据分类分级) baseline; the national standard GB/T 43697-2024 took effect on 1 October 2024. 中国确立了数据分类分级基线制度，国家标准GB/T 43697-2024于2024年10月1日施行。The Network Data Security Management Regulations (State...
2026-08-28
The Decision amending the Cybersecurity Law was adopted on 28 October 2025 and takes effect on 1 January 2026, with 14 amendments and a reissued text. 修改《网络安全法》的决定于2025年10月28日通过、2026年1月1日起施行，共14项修改并重新公布。A new...
2026-08-28
China's Network Data Security Regulation (State Council Order 790) took effect on 1 January 2025, turning the Cybersecurity Law, Data Security Law and PIPL into operational, enforceable obligations for...
2026-08-28
The 2026 action plan supports FTZs and service-opening pilot cities in exploring scenario-based, field-level data-export negative lists. 2026年行动方案支持自贸区、服务业扩大开放试点城市在更多领域制定场景化、字段级数据出境负面清单。National standards for "important data" identification catalogs will be promoted for...
2026-08-28
Under PIPL (in force 1 Nov 2021), personal information may leave China only through one of three mechanisms: a CAC security assessment, a standard contract (SCC), or certification. ...
2026-08-28
In August 2026 Guangzhou, Shenzhen and the Guangdong-Macao In-Depth Cooperation Zone in Hengqin were selected as the first batch of national pilot zones for international cooperation in the data...
2026-08-28
China's free-trade-zone (FTZ) data-export negative-list mechanism is moving from policy design to live, enforceable cases. 自贸试验区数据出境负面清单机制正从制度设计走向可落地的实际案例。Beijing, Hengqin (Guangdong), Chongqing and Nansha (Guangzhou) have each recorded its first negative-list data-export...
2026-08-28
The CAC "Provisions on Promoting and Regulating Cross-Border Data Flows" (CAC Decree No. 16, 22 March 2024) let free-trade zones formulate their own data-export negative lists under the national...
2026-08-28
The security assessment is the highest-threshold of China's three data-export routes and is mandatory when a Critical Information Infrastructure Operator (CIIO) exports personal information, or when any processor exports...