Progress

Current status
in force
20 Aug 2026in force
01 Jun 2026adopted
05 Jan 2026processing consultation
06 Dec 2025in consultation

Scope

Implementers
China
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
other regulatory body
data protection authority
Implementation Level
national

Timeline of events

20 Aug 2026
in force

Measures for risk assessment of network data security enter into force

On 20 August 2026, the measures for risk assessment of network data security, issued by the Cyberspace Administration, the Ministry of Industry and Information Technology, and the Ministry of Public Security, enter into force. The measures aim to st…

  • Cyberspace Administration adopted measures for risk assessment of network data security, Cyberspace Administration of China (Official)
01 Jun 2026
adopted

Cyberspace Administration adopted measures for risk assessment of network data security

On 1 June 2026, the Cyberspace Administration, the Ministry of Industry and Information Technology, and the Ministry of Public Security issued the measures for risk assessment of network data security. The measures aim to standardise network data se…

  • Cyberspace Administration adopted measures for risk assessment of network data security, Cyberspace Administration of China (Official)
05 Jan 2026
processing consultation

Cyberspace Administration of China closes consultation on draft measures for network data security risk assessments

On 5 January 2026, the Cyberspace Administration of China (CAC) closes the consultation on the draft measures for network data security risk assessments. The draft regulation defines the scope and procedures for conducting network data security risk…

  • Notice from the Cyberspace Administration of China on Soliciting Public Comments on the Draft Measures for Network Data Security Risk Assessment, Cyberspace Administration (CAC) (Official)
06 Dec 2025
in consultation

Cyberspace Administration of China opened consultation on draft measures for network data security risk assessments

On 6 December 2025, the Cyberspace Administration of China (CAC) opened a consultation on the draft measures for network data security risk assessments until 5 January 2026. The draft regulation defines the scope and procedures for conducting networ…

  • Notice from the Cyberspace Administration of China on Soliciting Public Comments on the Draft Measures for Network Data Security Risk Assessment, Cyberspace Administration (CAC) (Official)