Legislationsby Glyph
ChinaChinaProposal
Provisions on Personal Information Protection by Large Personal Information Handlers (Draft for Comment)
Draft rules that would designate handlers processing personal information of 10 million or more people or providing important network services as large handlers, subject to registration, heightened security duties and independent personal information protection supervisory committees.
Public comment period closesSep 7 2 months ago
- Body
- Cyberspace Administration of China
- Introduced
- Aug 7
Timeline
Sep 7 2 months ago
Aug 7 3 months ago
Draft released for public comment, merging earlier drafts on large online platforms
Related
ChinaAI Legislation
China proposed rules governing artificial intelligence that span data, computing, algorithms, deepfakes, and privacy.
ChinaInterim Measures for the Administration of AI Anthropomorphic Interactive Services
Regulates AI companion and other human-like emotional interaction services, barring virtual intimate relationship services for minors and requiring safeguards against emotional dependence and separate consent before chat data is used for training.
ChinaDecision Amending the Cybersecurity Law
Amends the Cybersecurity Law to add a provision supporting AI research, infrastructure, ethics and risk monitoring, raise fines for network security violations, and align liability with the Data Security Law and Personal Information Protection Law.
ChinaMeasures for Certification of Personal Information Export
Sets out the certification route for transferring personal information out of China, including which handlers may use it, the certification bodies and process, and supervision of certified transfers.
ChinaMeasures for Labeling AI-Generated Synthetic Content
Requires providers of AI generation services and content distribution platforms to add explicit visible labels and implicit metadata labels to AI-generated text, audio, images, video and virtual scenes, and bars removing or forging those labels.
ChinaMeasures for the Administration of National Network Identity Authentication Public Services
Creates a voluntary state-run online identity system that issues citizens a network ID number and network certificate so they can verify their identity to platforms without handing over ID card details, while platforms must keep other verification options.
ChinaMeasures for Personal Information Protection Compliance Audits
Requires personal information handlers to conduct regular compliance audits, with those processing data on more than 10 million people auditing at least every two years, and lets regulators order audits when risks arise.
ChinaNetwork Data Security Management Regulations
Implements the Cybersecurity Law, Data Security Law and Personal Information Protection Law with detailed rules on personal information handling, important data protection, cross-border data transfers and obligations of large online platforms.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.