China: Security

The revised Anti-Unfair Competition Law will come into effect on October 15. The new law emphasizes the legality of data acquisition and use by online operators, raising the maximum penalty limit from the original RMB 3 million to RMB 5 million.

The State Administration for Market Regulation and the Standardization Administration of China have jointly issued a new national standard applicable to companies conducting business in China, GB/T 45574-2025, Data Security Technology – Security Requirements for Processing of Sensitive Personal Information (the Standard), which will take effect on November 1, 2025.

China's primary data regulator, the Cyberspace Administration of China (CAC), released two sets of Q&As with respect to exporting data from China, one in April and one in May.