Jurisdiction · 7 regulations

China: data, AI and cyber laws

7 regulations in China that affect companies handling data: China AI Content Labeling Measures, China Cross-Border Data Flow Provisions, China Cybersecurity Law, China Data Security Law, China Network Data Security Regulations, China PI Compliance Audit Measures, China PIPL. Part of APAC.

7 regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

Sort

	Status
China AI Content Labeling Measures Measures for Labeling AI-Generated Synthetic Content	In force	Sep 1, 2025	None upcoming
China Cross-Border Data Flow Provisions Provisions on Promoting and Regulating Cross-Border Data Flows (CAC Order No. 16)	In force	Mar 22, 2024	None upcoming
China Cybersecurity Law Cybersecurity Law of the People's Republic of China (as amended by the NPC Standing Committee Decision of 28 October 2025)	Amended	Jun 1, 2017	None upcoming
China Data Security Law Data Security Law of the People's Republic of China	In force	Sep 1, 2021	None upcoming
China Network Data Security Regulations Regulations on Network Data Security Management (State Council Order No. 790)	In force	Jan 1, 2025	None upcoming
China PI Compliance Audit Measures Administrative Measures for Personal Information Protection Compliance Audits (CAC Order No. 18)	In force	May 1, 2025	None upcoming
China PIPL Personal Information Protection Law of the People's Republic of China	In force	Nov 1, 2021	None upcoming

China AI Content Labeling Measures
China
In forceAIOnline safety
Effective Sep 1, 2025
China Cross-Border Data Flow Provisions
China
In forceData residencyPrivacy
Effective Mar 22, 2024
China Cybersecurity Law
China
AmendedCybersecurityData residency
Effective Jun 1, 2017
China Data Security Law
China
In forceCybersecurityData residency
Effective Sep 1, 2021
China Network Data Security Regulations
China
In forcePrivacyCybersecurity
Effective Jan 1, 2025
China PI Compliance Audit Measures
China
In forcePrivacy
Effective May 1, 2025
China PIPL
China
In forcePrivacyData residency
Effective Nov 1, 2021

Past deadlines

January 20261 deadline

Jan12026
China Cybersecurity LawChina
2025 amendments take effect
Higher fines, first-violation fines, AI governance provisions and PIPL-alignment duties apply under the 28 Oct 2025 NPCSC Decision.
Takes effect9 months agoSource

September 20251 deadline

Sep12025
China AI Content Labeling MeasuresChina
AI content labeling measures and GB 45438-2025 take effect
Explicit and implicit labeling duties for AI-generated content and platform detection duties apply.
Takes effect13 months agoSource

May 20251 deadline

May12025
China PI Compliance Audit MeasuresChina
PI compliance audit measures take effect
Self-audit and regulator-ordered audit regime applies; 10M+ processors must audit at least every two years.
Takes effect17 months agoSource

January 20251 deadline

Jan12025
China Network Data Security RegulationsChina
Network Data Regulations take effect
All provisions, including the 10-million-person threshold duties and annual important-data risk assessments, apply.
Takes effect21 months agoSource

March 20241 deadline

Mar222024
China Cross-Border Data Flow ProvisionsChina
Cross-border data flow provisions take effect
Exemptions and volume thresholds apply from publication (Art. 14); security assessment results are valid for 3 years (Art. 9).
Takes effect2.5 years agoSource

November 20211 deadline

Nov12021
China PIPLChina
PIPL takes effect
All PIPL obligations (legal bases, consent, cross-border rules, data subject rights) apply (Art. 74).
Takes effect4.9 years agoSource

September 20211 deadline

Sep12021
China Data Security LawChina
Data Security Law takes effect
Data classification, important-data protection and data export restrictions apply (Art. 55).
Takes effect5.1 years agoSource

June 20171 deadline

Jun12017
China Cybersecurity LawChina
Cybersecurity Law takes effect
Original CSL obligations for network operators and CII operators apply.
Takes effect9.3 years agoSource