China: National Information Security Standardisation Technical Committee closes consultation on standard practice guide-personal information protection compliance audit requirements

On 6 May 2025, China's National Information Security Standardisation Technical Committee (TC260) closed its public consultation on the "Cybersecurity Standard Practice Guide - Personal Information Protection Compliance Audit Requirements (Draft for Comments V1.0-202504)". The consultation, which commenced on 28 April 2025, sought feedback on technical guidance for conducting compliance audits related to personal information protection, aiming to standardise audits, protect personal information rights, and regulate data processing activities. TC260 will review consultation feedback, finalise revisions, and coordinate with relevant authorities for adoption and implementation.