Cybersecurity Database

Regulation

Regulations on Network Data Security Management

In force since 1 January 2025Record checked against the official source on 29 October 2026 · Methodology

Official source: https://www.gov.cn/zhengce/content/202409/content_6977766.htm

Official sourceWayback Machine snapshot
Official number
State Council Decree No. 790
Date adopted
Entry into force

Summary

The 64-article regulation in 9 chapters implements the Cybersecurity Law, the Data Security Law and the Personal Information Protection Law for all data processing carried out over networks. It requires processors to adopt security measures, keep incident response plans with reporting to the competent authorities, and follow rules on notices, consent and data subject requests. Processors of important data, or of personal data of more than 10 million people, must appoint a data security officer and unit, and processors of important data must send an annual risk assessment to the authorities. It sets the conditions for transferring personal data abroad (security assessment, certification, standard contract or cases of necessity) and important data, and requires large platforms to publish an annual personal information protection report.

Who it applies to

Anyone processing data over networks in China and, in the cases covered by the Personal Information Protection Law, anyone processing abroad the personal data of people in China; stricter duties for processors of important data and large network platforms.

Information

Jurisdiction
China
Issuing body
State Council of the People's Republic of China
Type
Regulation
Available languages
Chinese
Topics
Notes
Approved at the State Council executive meeting of 30 August 2024, signed by the Premier on 24 September 2024, published on 30 September 2024 and in force since 1 January 2025. The annual risk assessments for important data were detailed by the network data security risk assessment measures, in force since 20 August 2026.

Record details

Original title
网络数据安全管理条例
Title in other languages
  • Regolamento sulla gestione della sicurezza dei dati di rete
  • Règlement sur la gestion de la sécurité des données de réseau
  • Reglamento de gestión de la seguridad de los datos de red
  • Verordnung über das Sicherheitsmanagement von Netzdaten
Licence / terms of use
Unknown
Collected from
manual entry
Last verified
(verified via web)

How to cite

APA

State Council of the People's Republic of China. (2024). 网络数据安全管理条例 (State Council Decree No. 790). https://www.gov.cn/zhengce/content/202409/content_6977766.htm

Chicago

State Council of the People's Republic of China. "网络数据安全管理条例." 30 August 2024. https://www.gov.cn/zhengce/content/202409/content_6977766.htm.

BibTeX

@misc{cn_network_data_security_management_regulations_2024,
  author       = {{State Council of the People's Republic of China}},
  title        = {{网络数据安全管理条例}},
  year         = {2024},
  note         = {State Council Decree No. 790},
  url          = {https://www.gov.cn/zhengce/content/202409/content_6977766.htm},
  urldate      = {2026-10-29}
}

Metadata and summary: CC BY 4.0 · JSON