๐ Data Privacy & Cybersecurity
ๆฐๆฎๅฎๅ จไธ็ฝ็ปๅฎๅ จ โ China's data privacy and cybersecurity legal framework
Data Privacy & Cybersecurity ๆฐๆฎๅฎๅ จไธ็ฝ็ปๅฎๅ จ
Sources:
- Chinese official texts: NPC Law Database, Cyberspace Administration of China (CAC)
Overview
China's data privacy regime rests on three foundational laws, sometimes referred to as the "three pillars" of data governance. Together they regulate personal information protection, data security, and cybersecurity across all sectors.
Three Pillars of Data Governance
Personal Information Protection Law (PIPL) โ
ไธชไบบไฟกๆฏไฟๆคๆณ โ Adopted August 20, 2021 | Effective November 1, 2021
China's comprehensive personal data protection statute, comparable to the EU's GDPR. Covers consent requirements, data subject rights, cross-border transfers, obligations of data processors, and enforcement by the Cyberspace Administration of China (CAC). 74 articles across 8 chapters.
Data Security Law (DSL) โ
ๆฐๆฎๅฎๅ จๆณ โ Adopted June 10, 2021 | Effective September 1, 2021
Establishes the framework for data classification and grading, defines "important data" and "core data" categories, and imposes security obligations on data processors. Covers government data openness, cross-border data provision, and countermeasures against discriminatory foreign restrictions. 55 articles across 7 chapters.
Cybersecurity Law (CSL) โ
็ฝ็ปๅฎๅ จๆณ โ Adopted November 7, 2016 | Effective June 1, 2017 | Amended October 28, 2025 (effective January 1, 2026)
2025 Amendment
The Cybersecurity Law was significantly amended in October 2025, with changes effective January 1, 2026. Key changes include increased penalties, new AI governance provisions (Article 20), and enhanced enforcement mechanisms. The text on this site reflects the 2025 amended version.
China's foundational cybersecurity statute. Establishes the tiered network security protection system (็ญ็บงไฟๆค), critical information infrastructure (CII) protections, real-name registration requirements, data localization rules, and incident response frameworks. 81 articles across 7 chapters.
Administrative Law
่กๆฟๆณ โ Administrative laws of the PRC
๐ Personal Information Protection Law
ไธชไบบไฟกๆฏไฟๆคๆณ โ Full English text (NPC official translation)
2026 ยฉ Denis Shushin.
Disclaimer: The content presented on this website is intended for informational purposes only and does not constitute legal advice. Laws and regulations may change, and the information provided may not reflect the most current legal developments. We encourage visitors to consult a qualified legal advisor before making any decisions based on this content.