China: Cyberspace Administration opened consultation on draft regulations on establishment of personal information protection supervisory committees on large-scale online platforms

On 12 September 2025, the Cyberspace Administration of China opened a consultation on draft regulations on the establishment of personal information protection supervisory committees on large-scale online platforms, until 12 October 2025. The draft regulations aim to guide and regulate how large-scale platforms establish and operate these committees to oversee personal information protection and promote compliance. The draft regulations apply to platforms that provide important internet platform services, have significant user bases, and complex business operations. Under the draft regulations, a Personal Information Protection Supervisory Committee is an independent body, mainly composed of external members, responsible for supervising personal data protection. Committees must have at least seven members, with two-thirds being external, to ensure independence and expertise. They are required to hold quarterly meetings to review compliance systems, data protection rules, sensitive data handling, impact assessments, and social responsibility reporting, and must maintain a communication mechanism for user concerns.