Regulations & Standards

Foundational Law

Data Security Law of the People's Republic of China

Foundational legislation for data security in China, establishing classified and graded data protection, regulating data processing activities, and balancing data security with development and utilization.

Standing Committee of the National People's Congress

2021-06-10 Passed2021-09-01 Effective

Foundational Law

Personal Information Protection Law of the People's Republic of China

Foundational legislation governing personal information processing, establishing principles such as informed consent and data minimization to comprehensively protect personal information rights.

Standing Committee of the National People's Congress

2021-08-20 Passed2021-11-01 Effective

Key Revision

Cybersecurity Law of the People's Republic of China (2025 Amendment)

Foundational legislation for cybersecurity; the 2025 amendment further strengthens critical information infrastructure protection and alignment of legal responsibilities.

Standing Committee of the National People's Congress

2025-10-28 Passed2026-01-01 Effective

Algorithm Governance

Provisions on the Management of Algorithmic Recommendation in Internet Information Services

Regulates algorithmic recommendation services, clarifying transparency, user choice, and oversight requirements to guard against algorithmic abuse.

Cyberspace Administration of China, MIIT, MPS, and SAMR

2021-12-31 Published2022-03-01 Effective

Deep Synthesis

Provisions on the Administration of Deep Synthesis in Internet Information Services

Dedicated rules for deep synthesis technology, requiring conspicuous labeling, content review, and traceability to prevent the spread of false information.

Cyberspace Administration of China, MIIT, and MPS

2022-11-25 Published2023-01-10 Effective

Generative AI

Interim Measures for the Management of Generative Artificial Intelligence Services

Dedicated rules for generative AI services, specifying compliance obligations for training data, content labeling, and security assessments while encouraging innovation alongside safety.

Cyberspace Administration of China, NDRC, MOE, MOST, MIIT, MPS, and NRTA

2023-07-10 Published2023-08-15 Effective

Facial Recognition

Measures for the Security Administration of Facial Recognition Technology Applications

Regulates the application of facial recognition technology, clarifying separate consent, data minimization, and retention requirements to protect personal information rights.

Cyberspace Administration of China and MPS

2025-03-13 Published2025-06-01 Effective

Personal Information Protection

Measures for the Administration of Personal Information Protection Compliance Audits

Establishes a personal information protection compliance audit system, defining audit scope, frequency, and remediation requirements to strengthen corporate compliance responsibilities.

Cyberspace Administration of China

2025-02-12 Published2025-05-01 Effective

Anthropomorphic Interaction

Interim Measures for the Administration of AI Anthropomorphic Interactive Services

Regulates AI anthropomorphic interactive services, clarifying identity labeling, content safety, and user rights protection requirements.

Cyberspace Administration of China, NDRC, MIIT, MPS, and SAMR

2026-04-10 Published2026-07-15 Effective

Technical Report

Research on Standardization of Agent Security (TC260-TR-005-2026)

Examines a standardization framework for agent security, providing technical references and standard recommendations for lifecycle security governance of AI agents.

National Information Security Standardization Technical Committee

2026-04-13 Published2026-04-13 Effective

National Standard

Artificial Intelligence — Large Language Models — Part 1: General Requirements (GB/T 45288.1-2025)

Specifies general capabilities, security requirements, and test methods for large language models, providing a national standard baseline for R&D and deployment.

State Administration for Market Regulation and Standardization Administration of China

2025-02-28 Published2025-02-28 Effective

National Standard

Artificial Intelligence — Large Language Models — Part 2: Evaluation Indicators and Methods (GB/T 45288.2-2025)

Defines evaluation indicator systems and test methods for large language models to support capability assessment and security evaluation practices.

State Administration for Market Regulation and Standardization Administration of China

2025-02-28 Published2025-02-28 Effective

National Standard

Artificial Intelligence — Large Language Models — Part 3: Service Capability Maturity Assessment (GB/T 45288.3-2025)

State Administration for Market Regulation and Standardization Administration of China

2025-01-24 Published2025-01-24 Effective

National Standard

Cybersecurity Technology — Marking Method for Content Generated by Artificial Intelligence (GB 45438-2025)

State Administration for Market Regulation and Standardization Administration of China

2025-02-28 Published2025-09-01 Effective

National Standard

Cybersecurity Technology — Security Specification for Data Annotation of Generative Artificial Intelligence (GB/T 45674-2025)

State Administration for Market Regulation and Standardization Administration of China

2025-04-25 Published2025-11-01 Effective

National Standard

Cybersecurity Technology — Basic Security Requirements for Generative Artificial Intelligence Services (GB/T 45654-2025)

State Administration for Market Regulation and Standardization Administration of China

2025-04-25 Published2025-11-01 Effective

National Standard

Cybersecurity Technology — Security Specification for Pre-training and Optimization Training Data of Generative Artificial Intelligence (GB/T 45652-2025)

State Administration for Market Regulation and Standardization Administration of China

2025-04-25 Published2025-11-01 Effective

National Standard

Cybersecurity Technology — Security Framework for Artificial Intelligence Computing Platforms (GB/T 45958-2025)

State Administration for Market Regulation and Standardization Administration of China

2025-08-01 Published2026-02-01 Effective

Technical Document

Security Specification for Government Large Model Applications (TC260-004)

National Information Security Standardization Technical Committee

2025-09-15 Published2025-09-15 Effective

Technical Document

Basic Security Requirements for Generative Artificial Intelligence Services (TC260-003)

National Information Security Standardization Technical Committee

2024-02-29 Published2024-02-29 Effective

System Guide

Guidelines for Building a Comprehensive Standardization System for the National Artificial Intelligence Industry (2024 Edition)

MIIT, Office of the Central Cyberspace Affairs Commission, NDRC, and SAMR

2024-06-05 Published2024-06-05 Effective

Policy Opinion

Opinions on Strengthening Governance of Science and Technology Ethics

General Office of the CPC Central Committee and the State Council

2022-03-20 Published2022-03-20 Effective

National Standard

Information Technology — Artificial Intelligence — Terminology

State Administration for Market Regulation and Standardization Administration of China

2022-10-14 Published2023-05-01 Effective

National Standard

Artificial Intelligence — Knowledge Graph Technology Framework (GB/T 42131-2022)

State Administration for Market Regulation and Standardization Administration of China

2022-12-30 Published2023-07-01 Effective