China: National People’s Congress announced submission of Cybersecurity Law (Draft Amendment) for second reading

On 23 October 2025, the Legislative Affairs Commission of the Standing Committee of the National People’s Congress (NPC) announced that the draft amendment to the Cybersecurity Law will be submitted for a second review during the 18th session of the 14th NPC Standing Committee, held from 24 to 28 October 2025 in Beijing. Initially reviewed at the 17th session in September 2025, the draft incorporates additional measures following the public consultation conducted from 12 September to 11 October 2025. The proposed amendments update the Law’s cybersecurity framework to align with the Civil Code and the Personal Information Protection Law (PIPL) and introduce provisions on the secure and ethical development of artificial intelligence (AI). It introduces a framework on AI security and development covering algorithm research, infrastructure, ethical standards, and risk monitoring. Further revisions increase penalties for non-compliance, refine obligations for network and critical infrastructure operators, prohibit unapproved sale or certification of cybersecurity products, and include leniency clauses for minor or promptly rectified violations.