China: Cyberspace Administration's regulations on safe application of facial recognition technology including data protection measures entered into force with grace period

On 13 March 2025, the Cyberspace Administration of China released the regulations on the safe application of facial recognition technology including data protection measures. The regulation applies to entities processing facial information within China, except for research and algorithm training. It introduces obligations including obtaining explicit consent, ensuring transparency, conducting impact assessments, implementing security measures, and restricting unnecessary use. It also provides that facial recognition cannot be the sole verification method where alternatives exist, and its use in public places is limited to public safety purposes, with private spaces explicitly excluded. The measures enter into force on 1 June 2025.