On October, 28, 2025, the Standing Committee of the National
People's Congress approved amendments to the Cybersecurity Law
of the PRC (the CSL). The amended CSL will become effective on
January, 1, 2026, marking the 10-year anniversary of the original
CSL. The CSL, the Data Security Law and the Personal Information
Protection Law form the core framework of China's data and
network regulation.
The latest amendments adopt a "small-incision"
approach, as explained by the Legislative Affairs Commission, and
touch on artificial intelligence, liabilities and extraterritorial
application.
Key takeaways
Integrating AI into the CSL
The amendments express support for foundational AI research,
core technologies such as algorithms, and infrastructure including
resources for training data and computing. They emphasize AI
ethics, risk monitoring and assessment, and safety oversight, while
encouraging robust and responsible AI deployment.
