Full Text

Official English text of Protocol CETS No. 223, which modernises Convention 108 (the “Convention 108+”) — opened for signature in Strasbourg on 10 October 2018, comprising 40 articles: amendments to Convention 108 article by article (Articles 1–35) and final clauses (Articles 36–40). Per the Council of Europe Treaty Office, it enters into force upon ratification by all Parties to Treaty ETS 108, or, as from 11 October 2023, once 38 Parties to the Convention have ratified it.

Full text of the Provisions on Promoting and Regulating Cross-Border Data Flows (CAC Order No. 16, promulgated and effective 22 March 2024), 14 articles: exemption scenarios, the negative-list mechanism in pilot free trade zones, the thresholds for the security assessment and the standard contract, and the three-year validity of assessment results. English translation by our editorial team (non-official, cross-checked article by article against the official Chinese text).

Full text of the Regulations on the Administration of Network Data Security (State Council Order No. 790, promulgated 24 September 2024, effective 1 January 2025), 64 articles in nine chapters: classified and graded protection, personal information processing rules, important data (security officer, annual risk assessment), cross-border transfer (assessment, certification, standard contract), obligations of large online platforms, supervision, and penalties of up to RMB 10 million. English translation by our editorial team (non-official).

Official text of Chapter 552 (Artificial Intelligence Protection) of the Texas Business & Commerce Code, enacted by HB 149 — the Texas Responsible Artificial Intelligence Governance Act (TRAIGA), effective 1 January 2026. Sixteen sections: definitions, construction, local preemption, disclosure to consumers, prohibition of manipulation of human behaviour, social scoring (governmental entities only), capture of biometric data, constitutional protection, unlawful discrimination, sexually explicit content and child protection, and enforcement by the attorney general (investigations, notice and cure, civil penalties, injunctions).

Official full text of the UN Convention against Cybercrime (UNGA resolution 79/243, 24 December 2024, annex; 9 chapters, 68 articles). Enters into force on the ninetieth day after deposit of the fortieth instrument of ratification; not yet in force. Text taken from official UN sources.