China: Cyberspace Administration of China closes consultation on Cybersecurity Law (Second Draft)

On 27 April 2025, the Cyberspace Administration of China closes its public consultation on the draft Law amending the Cybersecurity Law of the People's Republic of China. The amendments align the Cybersecurity Law with the Data Security Law, the Personal Information Protection Law, and the revised Administrative Penalty Law. The draft Law updates legal liability for network operators. Fines range from CNY 10,000 to 10 million for cybersecurity breaches leading to data leaks or disruptions to critical infrastructure. It also introduces penalties for selling or providing uncertified network and cybersecurity products. Minor or promptly corrected violations may face reduced or waived penalties. Further changes include revised obligations for handling and reporting prohibited information. The draft Law also refers violations related to personal data and localisation to other applicable laws.