China: Requirements for personal information protection compliance audit service capability requirements of professional institutions

Progress

Current status
adopted
26 May 2025 adopted
17 Mar 2025 processing consultation
04 Mar 2025 in consultation

Scope

Implementers
China
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
other service provider
Government Branch
executive
Government Body
central government
Implementation Level
national

Timeline of events

26 May 2025
adopted

National Information Security Standardisation Technical Committee adopted guidelines on service capability requirements for professional institutions of personal information protection compliance audits

On 26 May 2025, the National Network Security Standardisation Technical Committee (TC260) adopted the cybersecurity standard practice guidelines on service capability requirements for professional institutions of personal information protection comp…

Source
Event type outline
Action type adoption
Government branch executive
Government body central government
17 Mar 2025
processing consultation

National Network Security Standardisation Technical Committee closes consultation on requirements for personal information protection compliance audit service capability requirements of professional institutions

On 17 March 2025, the National Network Security Standardisation Technical Committee (TC260) closes its public consultation on the draft "Network Security Standard Practice Guide - Requirements for Personal Information Protection Compliance Audit Ser…

Source
Event type outline
Action type consultation closed
Government branch executive
Government body central government
04 Mar 2025
in consultation

National Network Security Standardisation Technical Committee opened consultation on requirements for personal information protection compliance audit service capability requirements of professional institutions

On 4 March 2025, the National Network Security Standardisation Technical Committee (TC260) opened a public consultation on the draft "Network Security Standard Practice Guide - Requirements for Personal Information Protection Compliance Audit Servic…

Source
Event type outline
Action type consultation opened
Government branch executive
Government body central government