China: National Information Security Standardisation Technical Committee’s standard on security requirements for data transaction services enters into force

On 1 July 2026, the National Information Security Standardisation Technical Committee’s (TC260) Standard Data Security Technology - Security Requirements for Data Transaction Services (GB/T 37932-2025) enters into force. The standard sets out security requirements for data-transaction services covering participants, platforms, targets, and processes. It applies to data providers, data demanders, data-transaction institutions, data vendors, and third-party data-service institutions, and to authorities and assessment bodies responsible for supervising and evaluating the security of data-transaction services.