On 18 June 2026, the Cyberspace Administration of China (CAC), the Ministry of Industry and Information Technology (MIIT), and the Ministry of Public Security (MPS) jointly issued the Measures for Network Data Security Risk Assessment. The Measures, previously open for public comment in December 2025, will take effect on 20 August 2026. They operationalize obligations for key data processors stipulated in the Data Security Law and the Regulation on Network Data Security Management. Under the new Measure, key data processors must conduct compulsory annual risk assessments and submit reports to the relevant authorities.
Read More