China: Data protection regulation in national standard GB/T 45574-2025 on Information Security Technology--Security Requirements for Processing Sensitive Personal Information
Progress
Current status
in force
01 Nov 2025 in force
25 Apr 2025 adopted
Scope
Implementers
China
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
other regulatory body
Implementation Level
national
Timeline of events
National standard GB/T 45574-2025 on Information Security Technology—Security Requirements for Processing Sensitive Personal Information enters into force
On 1 November 2025, the national standard GB/T 45574-2025 Information Security Technology—Security Requirements for Processing Sensitive Personal Information enters into force, requiring full compliance with its provisions for processing sensitive p…
SourceEvent type
order
Action type
implementation
Government branch
executive
Government body
other regulatory body
State Administration for Market Regulation and Standardisation Administration of China adopted national standard GB/T 45574-2025 on Information Security Technology—Security Requirements for Processing Sensitive Personal Information
On 25 April 2025, the State Administration for Market Regulation and the Standardization Administration of China adopted national standard GB/T 45574-2025, Information Security Technology—Security Requirements for Processing Sensitive Personal Infor…
SourceEvent type
order
Action type
adoption
Government branch
executive
Government body
other regulatory body