China’s amended Cybersecurity Law, effective from January 2026, emphasizes AI safety, enforcement, and clearer incident reporting. The revisions expand enforcement measures, clarify data protection obligations, and extend extraterritorial jurisdiction over cyber threats. #CybersecurityLaw #AIRegulation
Keypoints
- The amendments to China’s Cybersecurity Law aim to improve AI safety and enforcement mechanisms.
- Stricter penalties include fines up to RMB 10 million for companies and RMB 1 million for individuals.
- The law extends its jurisdiction to all foreign conduct that threatens China’s network security.
- Network operators must comply with multiple regulations, including the Civil Code and PIPL, regarding data protection.
- The Cyberspace Administration of China introduced new incident reporting procedures with defined severity levels and reporting channels.