Severity: Low New document CN
CAC publishes simplified personal information protection measures for small processors
Original title: 小型个人信息处理者个人信息保护简化措施规定
- Published
- Source: cac.gov.cn
- Effective
- Not stated
- Deadline
- Not stated
- Framework: China cyber and data regime
- Cybersecurity Law (as amended on 28 October 2025) source
Why it matters
The Cyberspace Administration of China (CAC) has published a regulation introducing simplified personal information protection measures specifically designed for small personal information processors. These tailored measures aim to reduce compliance burden while maintaining data protection standards for smaller operators in China's data protection framework.
What changed
- CAC introduces a new regulatory framework specifically for small personal information processors, creating tailored compliance requirements distinct from those applying to larger processors
Who is affected
Small personal information processors and handlers in China operating at smaller scale, across all sectors and industries that process personal data
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.