China

Official full text of the Data Security Law of the PRC: 7 chapters, 55 articles, adopted 2021-06-10, in force 2021-09-01. English text from the NPC official English site (marked “Translation for Reference Only”); Chinese original from the Cyberspace Administration of China.

Full text of the Measures for the Labelling of AI-Generated Synthetic Content (promulgated 14 March 2025, effective 1 September 2025), 14 articles: definitions of explicit and implicit labels, labelling duties across six content scenarios, verification duties of dissemination platforms, and the prohibition on providing tools that remove labels. English translation by our editorial team (non-official, cross-checked article by article against the official Chinese text).

Full text of the Measures for the Security Assessment of Data Export (Cyberspace Administration of China Order No. 11, promulgated 7 July 2022, effective 1 September 2022), 20 articles: the triggers for filing, the self-assessment of risks, materials required, the assessment factors, mandatory clauses in legal documents, the 45-working-day time limit, and the two-year validity of assessment results. English translation by our editorial team (non-official, cross-checked article by article against the official Chinese text).

Official full text of the Personal Information Protection Law of the PRC: 8 chapters, 74 articles, adopted 2021-08-20, in force 2021-11-01. English text as published on the NPC official English site (marked “Translation for Reference Only”).

Full text of the Provisions on Promoting and Regulating Cross-Border Data Flows (CAC Order No. 16, promulgated and effective 22 March 2024), 14 articles: exemption scenarios, the negative-list mechanism in pilot free trade zones, the thresholds for the security assessment and the standard contract, and the three-year validity of assessment results. English translation by our editorial team (non-official, cross-checked article by article against the official Chinese text).