Digital Policy Alert logo

China: Cyberspace Administration adopted measures for risk assessment of network data security

Policy overview

Description

Cyberspace Administration adopted measures for risk assessment of network data security

On 1 June 2026, the Cyberspace Administration, the Ministry of Industry and Information Technology, and the Ministry of Public Security issued the measures for risk assessment of network data security. The measures aim to standardise network data se…

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2025-12-06
in consultation

On 6 December 2025, the Cyberspace Administration of China (CAC) opened a consultation on the draft…

2026-01-05
processing consultation

On 5 January 2026, the Cyberspace Administration of China (CAC) closes the consultation on the draf…

2026-06-01
adopted

On 1 June 2026, the Cyberspace Administration, the Ministry of Industry and Information Technology,…

2026-08-20
in force

On 20 August 2026, the measures for risk assessment of network data security, issued by the Cybersp…