Skip to content
Legislations.
ChinaChinaLawLawCAC Order No. 18

Measures for Personal Information Protection Compliance Audits

Requires personal information handlers to conduct regular compliance audits, with those processing data on more than 10 million people auditing at least every two years, and lets regulators order audits when risks arise.

Where it stands

In forceIntroducedCommitteeFloorLawIn force

Measures enter into forceMay 1, 20251 year ago

Body
Cyberspace Administration of China
In effect since
May 1, 20251 year ago
PrivacyData
Official page On Regulations: China PI Compliance Audit Measures

Timeline

  1. May 1, 2025 1 year ago

    Measures enter into force

  2. Feb 14, 2025 1 year ago

    Measures published by the Cyberspace Administration of China

  3. Feb 12, 2025 1 year ago

    Signed as CAC Order No. 18

  4. May 20, 2024 2 years ago

    Reviewed and adopted at the CAC 15th office meeting of 2024