Share on LinkedInShare on LinkedIn

ARTICLE · 01 OCTOBER 2025

China Releases Final Measures On Cybersecurity Incident Reporting

Herbert Smith Freehills Kramer LLP
Herbert Smith Freehills Kramer LLP
Contributor
Herbert Smith Freehills Kramer LLP

Herbert Smith Freehills Kramer LLP

We have one of the largest Southeast Asia international law practices, working across the region...

View firm profile
Explore more from Herbert Smith Freehills Kramer LLP

Following our previous article regarding the consultation draft of the Administrative Measures for Reporting Cybersecurity Incidents...

ChinaTechnology

Following our previous article regarding the consultation draft of the Administrative Measures for Reporting Cybersecurity Incidents (https://www.hsfkramer.com/insights/2024-01/China-Releases-Draft-Measures-for-Cybersecurity-Incident-Reporting )(Draft), the Cyberspace Administration of China (CAC) has officially issued the final version of the measures (https://www.cac.gov.cn/2025-09/15/c_1759583017717009.htm) on September 11, 2025 (Measures), which will take effect on November 1, 2025, and marks a significant step toward formalizing China's cybersecurity incident reporting regime.

The final Measures retain the core structure of the Draft but introduce several notable refinements in terms of reporting thresholds, procedures, and liability exemptions. We summarize the key highlights and practical implications for network operators in this article.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from