ChinaChinaLawState Council Order No. 790
Network Data Security Management Regulations
Implements the Cybersecurity Law, Data Security Law and Personal Information Protection Law with detailed rules on personal information handling, important data protection, cross-border data transfers and obligations of large online platforms.
Regulations enter into forceJan 1, 2025 1 year ago
- Body
- State Council of the People's Republic of China
- In effect since
- Jan 1, 20251 year ago
Timeline
Jan 1, 2025 1 year ago
Sep 30, 2024 2 years ago
Sep 24, 2024 2 years ago
Aug 30, 2024 2 years ago
Related
AI Legislation
China proposed rules governing artificial intelligence that span data, computing, algorithms, deepfakes, and privacy.
Provisions on Personal Information Protection by Large Personal Information Handlers (Draft for Comment)
Draft rules that would designate handlers processing personal information of 10 million or more people or providing important network services as large handlers, subject to registration, heightened security duties and independent personal information protection supervisory committees.
Interim Measures for the Administration of AI Anthropomorphic Interactive Services
Regulates AI companion and other human-like emotional interaction services, barring virtual intimate relationship services for minors and requiring safeguards against emotional dependence and separate consent before chat data is used for training.
Decision Amending the Cybersecurity Law
Amends the Cybersecurity Law to add a provision supporting AI research, infrastructure, ethics and risk monitoring, raise fines for network security violations, and align liability with the Data Security Law and Personal Information Protection Law.
Measures for Certification of Personal Information Export
Sets out the certification route for transferring personal information out of China, including which handlers may use it, the certification bodies and process, and supervision of certified transfers.
Measures for Labeling AI-Generated Synthetic Content
Requires providers of AI generation services and content distribution platforms to add explicit visible labels and implicit metadata labels to AI-generated text, audio, images, video and virtual scenes, and bars removing or forging those labels.
Cybersecurity Technology: Labeling Method for AI-Generated Synthetic Content
Sets the mandatory national technical standard for how explicit and implicit labels, including metadata, must be applied to AI-generated text, images, audio, video and virtual scenes under China's labeling measures.
Measures for the Administration of National Network Identity Authentication Public Services
Creates a voluntary state-run online identity system that issues citizens a network ID number and network certificate so they can verify their identity to platforms without handing over ID card details, while platforms must keep other verification options.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.