China: Ministry of Industry and Information Technology issued notice in investigation into internet of things (IoT) devices infringing data protection regulations

On 22 October 2025, the Chinese Ministry of Industry and Information Technology (MIIT) issued a notice listing 20 Internet of Things (IoT) devices found to be collecting and using personal information illegally. The MIIT has ordered the producers of these devices to rectify their practices according to the regulation. The notice is part of a series of special actions on personal data protection conducted jointly by MIIT and other government agencies. The 20 smart terminals identified in the notice include home security cameras, smart locks with facial recognition capabilities, smart speakers, children's phones, learning tablets, and AI-enabled toys. The violations documented in the Notice include the absence of personal information processing rules, transmission of personal information to cloud services, and a lack of permission control mechanisms.