Cyberspace Administration of China
Office of the Central Cyberspace Affairs Commission — primary regulator for cybersecurity, personal information, and AI in mainland China.
Enforces a layered, risk-based regulatory framework: foundation laws (CSL / DSL / PIPL) overlaid with targeted AI rules (Generative AI Measures, Algorithm Recommendation, Deep Synthesis Provisions).
Reviews and files generative AI services, conducts algorithm filings, and runs the Qinglang campaigns enforcing AI content safety.
Most recent landmark instrument · Interim Measures for Generative AI Services · Aug 2023 ↗- Cybersecurity Law (CSL, 2017) ↗
- Data Security Law (DSL, 2021) ↗
- Personal Information Protection Law (PIPL, 2021) ↗
- Administrative Measures on Internet-based Information Services ↗
- GB 45438-2025 (AI Content Labeling Standard) · indexing pending
- GB/T 45654-2025 (Generative AI Security Standard) · indexing pending
- TC260-003 Guidelines (Generative AI Security) · indexing pending
Practical guidance
Generative AI Service Regulations
Primary framework for content safety, security assessments, and filings for generative AI services offered to the Chinese public. PAI: AT2 verified.
Algorithm Recommendation Regulations
Filing requirements for personalised recommendation, ranking, and dispatch algorithms; user-control and transparency duties.
Deep Synthesis Provisions
Rules for AI-generated synthetic media: labelling, provenance, prohibited uses, content moderation.
Network Data Security Management Regulation
State Council regulation operationalising data classification, breach reporting, and cross-border data export controls under DSL+PIPL.
Scientific & Technological Ethics Review Regulation
MOST-led ethics review regime for AI/biotech/neurotech R&D. Defines responsible entities, registration, review focus areas.
AI Content Labeling Measures
CAC measures for labelling AI-generated synthetic content — explicit + implicit labels; SSMI obligations.
Anthropomorphic Interaction AI — Interim Measures
Targets AI services simulating human personality / emotional interaction; mitigates user manipulation, emotional dependency, cognitive autonomy risks.
Facial Recognition Tech Security Mgmt Measures
Security management measures specific to facial recognition technology — classification, registration, prohibited uses.
Recently updated
- Mar 2025AI Content Labeling Measures (AT2 verified)AI Labeling
- Mar 2025Facial Recognition Tech Security Mgmt (AT2 verified)Facial Recognition
- Dec 2025Anthropomorphic Interaction AI Measures (AT2 verified, draft)Anthropomorphic AI
- Aug 2023Generative AI Service Regulations (AT2 verified)Generative AI
- Jan 2023Deep Synthesis Provisions (AT2 verified)Deep Synthesis