China: National Cybersecurity Standardisation Technical Committee released Cybersecurity Standards Practice Guide on Security Requirements for Shake-to-Trigger Advertising Behaviour

Description

National Cybersecurity Standardisation Technical Committee released Cybersecurity Standards Practice Guide on Security Requirements for Shake-to-Trigger Advertising Behaviour

On 22 July 2025, the Secretariat of the National Cybersecurity Standardisation Technical Committee (TC260), by issuance of Network Security Secret No.〔2025〕94, released the “Cybersecurity Standards Practice Guide- Security Requirements for Shake-to-Trigger Advertising Behaviour”, version 1.0. The guide establishes basic principles for safeguarding personal rights and interests and defines security requirements concerning the activation of shake-triggered advertisements on mobile smart terminals. It applies to mobile applications, third-party software development kit (SDK) operators, and other personal information processors or assessment bodies, aiming to standardise the triggering and display behaviour of such advertisements. The document incorporates references to GB/T 25069, GB/T 32927—2016, GB/T 35273, and GB/T 41391—2022 and sets operational parameters including sensor sensitivity thresholds (e.g. acceleration ≥15 m/s², bidirectional rotation angle ≥35°, duration ≥3 seconds). It also prescribes mandatory visual indicators, ad closure options, user opt-out configurations, and safeguards against unintentional ad activation from routine movements. The guide provides technical direction for compliance by app operators and SDK providers in managing advertisement triggering behaviour on mobile platforms.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
online advertising provider, software provider: other software
Implementation Level
national
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2025-01-23
in consultation

On 23 January 2025, the National Information Security Standardization Technical Committee (TC260) o…

2025-02-05
processing consultation

On 5 February 2025, the National Information Security Standardization Technical Committee (TC260) c…

2025-07-22
adopted

On 22 July 2025, the Secretariat of the National Cybersecurity Standardisation Technical Committee …