On 28 December 2025, the Ministry of Public Security closed the consultation on the draft Measures for Supervision and Inspection of Cyberspace Security by Public Security Organs. The draft sets out the legal basis under the Police Law, the Cybersecurity Law, the Data Security Law, and the Personal Information Protection Law of the People’s Republic of China. It applies to network operators, data processors, and personal information processors, and establishes procedures for online inspections such as network information patrols, information-review capability tests, and vulnerability scanning, followed by onsite verification. It outlines obligations concerning cybersecurity, information security, and data security management systems, log retention, security-grade protection, algorithm-security responsibilities, and cooperation duties. It also sets requirements for inspection records, rectification processes, risk notifications, coordination with other authorities, confidentiality obligations, and administrative and legal liability for public security personnel, inspected entities, and entrusted cybersecurity service institutions.
Original source