China: Cyberspace Administration's regulations on safe application of facial recognition technology including business registration requirements enter into force

Description

Cyberspace Administration's regulations on safe application of facial recognition technology including business registration requirements enter into force

On 1 June 2025, the Cyberspace Administration of China regulations on the safe application of facial recognition technology including business registration requirements enter into force. The regulation applies to entities processing facial information within China, except for research and algorithm training. It requires entities storing 100'000 or more facial records to register with provincial-level or higher cybersecurity authorities within 30 working days. It requires them to submit details on processing purposes, security measures, and an impact assessment.

Original source

Scope

Policy Area
Authorisation, registration and licensing
Policy Instrument
Business registration requirement
Regulated Economic Activity
ML and AI development
Implementation Level
national
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2023-08-08
in consultation

On 8 August 2023, the Cyberspace Administration of China (CAC) opened a consultation on the draft R…

2023-09-07
processing consultation

On 7 September 2023, the Cyberspace Administration of China (CAC) closed its consultation on the dr…

2024-09-30
adopted

On 30 September 2024, the Cyberspace Administration of China adopted the regulations on the safe ap…

2025-03-13
in grace period

On 13 March 2025, the Cyberspace Administration of China released the regulations on the safe appli…

2025-06-01
in force

On 1 June 2025, the Cyberspace Administration of China regulations on the safe application of facia…