Controlling law
Identify the legal basis in the PIPL, DSL or CSL.
Independent legal research platform
China Data Regulation
Featured research
Large personal information processors: reading the August 2026 draft
The August proposal consolidates two earlier platform drafts. Separate proposed designation and governance duties from obligations already in force before changing an internal compliance programme.
Enter by question
Choose a research path
Start with the problem you need to solve, then move through the connected source chain.
010203040506
Personal information
PIPL, sensitive personal information, compliance audits, individual rights and impact assessments.
Cross-border data
Security assessment, standard contract, certification, thresholds, counting and regional negative lists.
Cyber and data security
CSL, DSL, network data regulation, important data and incident reporting.
Artificial intelligence
Algorithms, deep synthesis, generative AI, content labeling and anthropomorphic interaction.
National standards
Verified metadata, implementation dates, standards-family relationships and original implementation tools.
Regional and sector rules
Ten regional export negative-list systems, automotive data and sector-specific sources.
Source chain
Move from legal basis to a reviewable decision
Every topic follows the same research logic so readers know whether they are viewing law, implementing rules, version change or an editorial tool.
Implementing sources
Connect departmental rules, regulations, local measures and official Q&As.
Version change
Check drafts, final text, amendments, effective dates and transition rules.
Working output
Produce a route decision, verification checklist, evidence record or internal action plan.
Version tracking
The useful question is not what was published, but what changed
Comparison pages record the earlier rule, current rule, practical impact, effective date and official sources.
012025-12-27→2026-04-10022021-08-16→2026-02-03032016-11-07→2025-10-28
View all comparisonsAnthropomorphic AI Interaction Services: Consultation Draft vs. Final Measures
The final measures convert the CAC consultation proposal into a joint five-authority rule, retain the core focus on dependency, minors, personal information and security assessment, and add a fixed effective date and a more developed lifecycle-governance structure.
Automotive Data Rules: 2021 Provisions and the 2026 Export Security Guideline
The 2026 guideline does not repeal or replace the 2021 trial provisions. It operationalizes the national data-export framework for automotive scenarios by setting out route selection, exemptions, important-data identification, filing steps and security controls.
2016 Cybersecurity Law vs. 2025 Amendment
The amendment adds national-policy and artificial-intelligence provisions, links personal-information handling to the PIPL and Civil Code, restructures liability provisions, increases consequence-based penalties, and broadens the extraterritorial provision.
Cross-border data
National routes and regional negative lists belong in one research chain
Local lists help identify geographic and sector scope; national rules determine the compliance route.
Open the national negative-list directoryGuangdongGuangdong Pilot Free Trade Zone Data Export Negative List (2025 Edition)2025 · 2 sectorsBeijingBeijing Data Export Negative List (2025 Edition)2025 · 9 sectorsShanghaiShanghai Data Export Negative List (2025 Edition)2025 · 4 sectorsFujianFujian Pilot Free Trade Zone Data Export Negative List (2025 Edition)2025 · 4 sectors
Practical tools
Turn research into a reviewable working record
Original workbooks and implementation aids do not reproduce national-standard text or replace legal advice.
Complete starter library
Browse all practical toolsChina Data Compliance Launch Library
Four coordinated operational products for China privacy, personal-information governance, and cross-border transfer work.
Open recordCross-border data transfersChina Cross-Border Data Transfer Route Decision Toolkit
A structured decision workbook for assessing exemptions, standard contracts, certification, and security-assessment routes.
Open recordPersonal information programGB/T 35273 Personal Information Program Implementation Companion
An original control and evidence workbook that converts personal-information security expectations into an operating program.
Open recordEvery public record has a visible source boundary
Official Chinese sources control. Factual metadata, reference translations, editorial explanation and practical tools are separated and carry a last-verified date.
Review editorial and source methodology