CHI CAC Cybersecurity Law Revisions

Updated on: Sep 17, 2025

Latest Event


  • Sep. 12, 2025 Public Consultation
  • On Sep. 12, 2025, CHI PRL sought feedback on the revised draft of Cybersecurity law.
  • Public consultation closes on Oct. 11, 2025.

On Mar. 28, CHI CAC proposed to revise cybersecurity law.

  • CHI CAC issued revised draft of Cybersecurity law for further comments.
  • Follows CHI PRL Apr. 2024 drafted legislative work plan, bills planned, see #209454.
  • Also follows CHI CAC Sep. 2022 proposed to amend cybersecurity law, see #148076.
  • Proposed Amendments
  • Adjusted the penalty range of article 59 of the Cybersecurity Law with reference to the Data security law, and corresponding penalty provisions have been added.
  • Added legal liability for selling or providing critical network equipment and network security-specific products that have not obtained the required security certification.
  • Adjusted legal responsibility for failing to report to the competent authorities and for failing to stop the transmission of information prohibited by laws or regulations from being published or transmitted, or to take measures to eliminate such information.
  • Clarified the disposal and punishment measures for violations with serious impacts.
  • Clarified the legal liability for the security of personal information and important data.
  • Clarified circumstances regarding lenient, mitigated or zero administrative penalties.
  • Consultation Period
  • Consultation closes on Apr. 27, 2025.
  • Sep. 8, 2025 CHI PRL First Review
  • On Sep. 8, 2025, CHI PRL said draft amendment was submitted for first review, aims to strengthen legal responsibility and increase penalties for cybersecurity violations.
  • Sep. 12, 2025 Public Consultation
  • On Sep. 12, 2025, CHI PRL sought feedback on the revised draft of Cybersecurity law.
  • Public consultation closes on Oct. 11, 2025.
Regulators
CHI CAC; CHI PRL
Entity Types
Corp
Reference
CP, PR 9/12/2025; PR 9/8/2025; CP, PR, 3/28/2025
Functions
Cyber; Legal; Privacy; Registration/Licensing; Reporting; Risk; Technology; Treasury
Countries
China
Category
State
N/A
Products
Corporate
Rule Type
Proposed
Regions
AP
Rule Date
Mar 28, 2025
Effective Date
Oct 11, 2025
Rule ID
248900
Linked to
Reg. Last Update
Sep 12, 2025
Report Section
International