On 1 May 2025, the Cyberspace Administration of China (CAC)’s Measures for the Administration of Compliance Audits on Personal Information Protection enter into force. The measures establish a framework for auditing personal information processing a…