China: Cyberspace Administration closes consultation on draft Regulation on Protection of Personal Information on Large-scale Online Platforms including organisational requirements

On 22 December 2025, the Cyberspace Administration of China closes the consultation on the draft Regulation on the Protection of Personal Information on Large-scale Online Platforms. The regulation would apply to large-scale online platforms developed or operated within China, as identified by internet regulatory agencies according to criteria such as the number of registered users (50 million), monthly active users (10 million), the provision of important network services or multiple types of business, and the processing of data which, if compromised, could have serious consequences for national security or the economy. Providers of large-scale online platforms would be required to take certain organisational measures, including officially designating a person in charge of personal data protection who is a Chinese national with sufficient experience and no long-term overseas residence. The person in charge of personal information protection would perform duties such as guiding the large-scale online platform in complying with personal information protection requirements, having veto power over personal information protection matters, reporting security risks or violations, and formulating special rules for the protection of the personal information of minors. The regulation would also establish requirements for the cooperation between large-scale online platforms and data centres and encourage the use of national data labels and certifications.