Whilst compliance audits for personal information protection are taking into shape, network data security risk assessment is now on the horizon. Is this an unbearable burden for enterprises, or can it be a convenient way to meet compliance requirements?
On the night before the Dragon Boat Festival, June 18, 2026, the Cyberspace Administration of China, the Ministry of Industry and Information Technology, and the Ministry of Public Security jointly issued the Measures for Network Data Security Risk Assessment (hereinafter referred to as the "Measures"), which will take effect on August 20, 2026. The promulgation of these Measures marks the imminent implementation of China’s data security risk assessment system. But what do the Measures actually mean for enterprises?