China cyber and data regime
Also known as: PIPL, CSL, DSL, MLPS, Cybersecurity Law of China, Personal Information Protection Law, Data Security Law, CAC
Cybersecurity Law, Data Security Law, PIPL and the CAC rules under them — CAC (Cyberspace Administration of China)
Official site Official change log
Three statutes read together — the Cybersecurity Law, the Data Security Law and the Personal Information Protection Law — plus the departmental rules the Cyberspace Administration issues under them. Obligations reach any company with operations or customers in China: data localisation, security assessment before transferring data abroad, and the multi-level protection scheme for systems rated by importance.
Subscribe to China cyber and data regime (RSS)
Timeline
July 2026
China cyber and data regime Low New document
CAC publishes simplified personal information protection measures for small processorsThe Cyberspace Administration of China (CAC) has published a regulation introducing simplified personal information protection measures specifically designed for small personal information processors. These tailored measures …
Monitoring
Watched by 2 official sources. Watching since 19 September 2026. Last checked 2 hours, 20 minutes ago.