Translation

Full text of the Cybersecurity Law of the People’s Republic of China as amended on 28 October 2025 (effective 1 January 2026), 81 articles in seven chapters: the new Article 3 (CPC leadership and the holistic approach to national security), the new Article 20 on artificial intelligence, the new Article 63 on penalties for uncertified critical network equipment, and the substantially raised penalty caps (up to RMB 10 million). English translation by our editorial team (non-official).

Full text of the Interim Measures for the Administration of Generative Artificial Intelligence Services (promulgated 10 July 2023, effective 15 August 2023), 24 articles in five chapters: scope, training-data obligations, provider duties, obligations to users, security assessment and algorithm filing for services with public-opinion or social-mobilisation attributes, and penalties. English translation by our editorial team (non-official, cross-checked article by article against the official Chinese text).

Full text of the Measures for the Labelling of AI-Generated Synthetic Content (promulgated 14 March 2025, effective 1 September 2025), 14 articles: definitions of explicit and implicit labels, labelling duties across six content scenarios, verification duties of dissemination platforms, and the prohibition on providing tools that remove labels. English translation by our editorial team (non-official, cross-checked article by article against the official Chinese text).

Full text of the Measures for the Security Assessment of Data Export (Cyberspace Administration of China Order No. 11, promulgated 7 July 2022, effective 1 September 2022), 20 articles: the triggers for filing, the self-assessment of risks, materials required, the assessment factors, mandatory clauses in legal documents, the 45-working-day time limit, and the two-year validity of assessment results. English translation by our editorial team (non-official, cross-checked article by article against the official Chinese text).

Full text of the Provisions on Promoting and Regulating Cross-Border Data Flows (CAC Order No. 16, promulgated and effective 22 March 2024), 14 articles: exemption scenarios, the negative-list mechanism in pilot free trade zones, the thresholds for the security assessment and the standard contract, and the three-year validity of assessment results. English translation by our editorial team (non-official, cross-checked article by article against the official Chinese text).

Full text of the Regulations on the Administration of Network Data Security (State Council Order No. 790, promulgated 24 September 2024, effective 1 January 2025), 64 articles in nine chapters: classified and graded protection, personal information processing rules, important data (security officer, annual risk assessment), cross-border transfer (assessment, certification, standard contract), obligations of large online platforms, supervision, and penalties of up to RMB 10 million. English translation by our editorial team (non-official).