On 21 March 2025, the Cyberspace Administration of China (CAC) issued guidance on the regulations on the safe application of facial recognition technology. The guidance outlined the background to the Measures, including their basis in existing laws such as the Cybersecurity Law and the Personal Information Protection Law. It clarified that the Measures aim to regulate the processing of facial information while allowing space for research and development activities. The CAC confirmed that facial recognition should not be the sole method of identity verification where alternatives exist, and that the installation of facial recognition equipment in public places must be limited to public safety purposes, with private spaces excluded. The guidance also provided further detail on filing requirements for personal information processors that store 100'000 or more facial records.
Original source