Legislationsby Glyphunverified
AI Legislation
China proposed rules governing artificial intelligence that span data, computing, algorithms, deepfakes, and privacy.
ChinaChina
14 on file · 12 became law · 2 still moving · 1 moved in 30 days
Provisions on Personal Information Protection by Large Personal Information Handlers (Draft for Comment)
Draft rules that would designate handlers processing personal information of 10 million or more people or providing important network services as large handlers, subject to registration, heightened security duties and independent personal information protection supervisory committees.
CAC Order No. 21
Interim Measures for the Administration of AI Anthropomorphic Interactive Services
Regulates AI companion and other human-like emotional interaction services, barring virtual intimate relationship services for minors and requiring safeguards against emotional dependence and separate consent before chat data is used for training.
Presidential Order No. 61
Decision Amending the Cybersecurity Law
Amends the Cybersecurity Law to add a provision supporting AI research, infrastructure, ethics and risk monitoring, raise fines for network security violations, and align liability with the Data Security Law and Personal Information Protection Law.
CAC and SAMR Order No. 20
Measures for Certification of Personal Information Export
Sets out the certification route for transferring personal information out of China, including which handlers may use it, the certification bodies and process, and supervision of certified transfers.
Guo Xin Ban Tong Zi (2025) No. 2
Measures for Labeling AI-Generated Synthetic Content
Requires providers of AI generation services and content distribution platforms to add explicit visible labels and implicit metadata labels to AI-generated text, audio, images, video and virtual scenes, and bars removing or forging those labels.
GB 45438-2025
Cybersecurity Technology: Labeling Method for AI-Generated Synthetic Content
Sets the mandatory national technical standard for how explicit and implicit labels, including metadata, must be applied to AI-generated text, images, audio, video and virtual scenes under China's labeling measures.
Guo Fa (2025) No. 11
Opinions on Deepening the AI Plus Action
Sets China's national plan to integrate AI across science, industry, consumption, public services, governance and international cooperation, targeting over 70 percent adoption of intelligent terminals and agents by 2027 and over 90 percent by 2030.
MPS Order No. 173
Measures for the Administration of National Network Identity Authentication Public Services
Creates a voluntary state-run online identity system that issues citizens a network ID number and network certificate so they can verify their identity to platforms without handing over ID card details, while platforms must keep other verification options.
CAC Order No. 18
Measures for Personal Information Protection Compliance Audits
Requires personal information handlers to conduct regular compliance audits, with those processing data on more than 10 million people auditing at least every two years, and lets regulators order audits when risks arise.
State Council Order No. 790
Network Data Security Management Regulations
Implements the Cybersecurity Law, Data Security Law and Personal Information Protection Law with detailed rules on personal information handling, important data protection, cross-border data transfers and obligations of large online platforms.
CAC Order No. 16
Provisions on Promoting and Regulating Cross-Border Data Flows
Relaxes China's data export rules by exempting several categories of cross-border transfers from security assessment, standard contract or certification requirements and letting free trade zones set negative lists.
CAC Order No. 15
Interim Measures for the Management of Generative AI Services
Sets rules for providers offering generative AI services to the public in China, covering training data legality, content controls, labeling, user protection, security assessments and algorithm filing.
CAC Order No. 12
Provisions on the Administration of Deep Synthesis Internet Information Services
Regulates deep synthesis technologies such as face swapping and voice cloning, requiring providers to verify users, label synthetic content, obtain consent for editing biometric features and conduct security assessments.