China: Cyberspace Administration's regulations on safe application of facial recognition technology including data protection measures enter into force

On 1 June 2025, the Cyberspace Administration of China's regulations on the safe application of facial recognition technology including data protection measures enter into force. The regulation applies to entities processing facial information within China, except for research and algorithm training. It introduces obligations including obtaining explicit consent, ensuring transparency, conducting impact assessments, implementing security measures, and restricting unnecessary use. It also provides that facial recognition cannot be the sole verification method where alternatives exist, and its use in public places is limited to public safety purposes, with private spaces explicitly excluded.