Progress

Current status
adopted
20 Aug 2026 in force
01 Jun 2026 adopted
05 Jan 2026 processing consultation
06 Dec 2025 in consultation

Scope

Implementers
China
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
other regulatory body
data protection authority
Implementation Level
national

Timeline of events

20 Aug 2026
in force

Measures for risk assessment of network data security enter into force

On 20 August 2026, the measures for risk assessment of network data security, issued by the Cyberspace Administration, the Ministry of Industry and Information Technology, and the Ministry of Public Security, enter into force. The measures aim to st…

Event type order
Action type implementation
Government branch executive
Government body other regulatory body
01 Jun 2026
adopted

Cyberspace Administration adopted measures for risk assessment of network data security

On 1 June 2026, the Cyberspace Administration, the Ministry of Industry and Information Technology, and the Ministry of Public Security issued the measures for risk assessment of network data security. The measures aim to standardise network data se…

Event type order
Action type adoption
Government branch executive
Government body other regulatory body
05 Jan 2026
processing consultation

Cyberspace Administration of China closes consultation on draft measures for network data security risk assessments

On 5 January 2026, the Cyberspace Administration of China (CAC) closes the consultation on the draft measures for network data security risk assessments. The draft regulation defines the scope and procedures for conducting network data security risk…

Event type order
Action type consultation closed
Government branch executive
Government body data protection authority
06 Dec 2025
in consultation

Cyberspace Administration of China opened consultation on draft measures for network data security risk assessments

On 6 December 2025, the Cyberspace Administration of China (CAC) opened a consultation on the draft measures for network data security risk assessments until 5 January 2026. The draft regulation defines the scope and procedures for conducting networ…

Event type order
Action type consultation opened
Government branch executive
Government body data protection authority