Research across the library

Search laws, regulations, standards and guides

Suggested searches

Current priorities

2026-07-03Revised Internet Information Service Measures draft2026-06-18Network data risk assessment: draft versus final

Direct answer

The CAC-administered route applies when current triggers are met, read with later facilitation provisions and filing guidance.

Current rules

Regulatory timeline

  1. Effective

    Security Assessment Measures take effect

    The formal national route takes effect.

    Open official source
  2. Guidance

    Third-edition filing guide published

    Application materials are updated.

    Open official source
  3. Upcoming

    Network Data Risk Assessment Measures take effect

    A related risk-reporting framework begins.

    Open official source

Versions and relationships

Practical sequence

  1. 01

    Confirm important-data and volume triggers.

  2. 02

    Build a fact record before the filing package.

  3. 03

    Track validity, changes and extension conditions.

Related tools

Official sources

Security Assessment MeasuresThird-edition filing guide