Description
China's amended Cybersecurity Law took effect January 1, 2026, with significantly increased penalties: maximum fines increased fivefold for general violations, with a new severe violations category carrying fines up to RMB 10 million. The CSL now has expanded extraterritorial reach covering overseas organizations harming China's cybersecurity.
Requirements
- Assess compliance with amended CSL requirements
- Review extraterritorial applicability for overseas operations
- Update data localization practices for CII operators
- Implement enhanced cybersecurity measures per new standards
- Document compliance with increased penalty provisions
Applicable To
Network operators in ChinaForeign organizations engaging with China cybersecurityCritical Information Infrastructure Operators in China
Penalty Information
âš Fines up to RMB 10 million; personal fines for directly responsible persons; business license revocation for severe violations.