On 1 June 2025, the Cyberspace Administration of China regulations on the safe application of facial recognition technology including business registration requirements enter into force. The regulation applies to entities processing facial information within China, except for research and algorithm training. It requires entities storing 100'000 or more facial records to register with provincial-level or higher cybersecurity authorities within 30 working days. It requires them to submit details on processing purposes, security measures, and an impact assessment.
Original source