China's Revised Cybersecurity Law: Key Changes Enterprises Need To Know

The 2025 revision of China's Cybersecurity Law (the Amendment) was adopted on October 28, 2025, and will take effect on January 1, 2026. This marks the first major update since the law's enactment in 2017. The Amendment addresses emerging cybersecurity risks, introduces governance for rapidly advancing AI technologies, and aligns with existing legislation such as the Data Security Law and the Personal Information Protection Law.

Key Amendments Overview

1. Introduction of AI Governance Framework – New Article 20

The Amendment introduces a dedicated provision on artificial intelligence governance. Article 20 now stipulates that the state:

• Supports fundamental research on AI theories and the development of key technologies such as algorithms;