{"id":71902,"date":"2026-04-28T00:40:58","date_gmt":"2026-04-27T15:40:58","guid":{"rendered":"https:\/\/monolith.law\/en\/?p=71902"},"modified":"2026-05-01T12:27:52","modified_gmt":"2026-05-01T03:27:52","slug":"china-cybersecurity-law-prc-penalties-extraterritorial-compliance","status":"publish","type":"post","link":"https:\/\/monolith.law\/en\/general-corporate\/china-cybersecurity-law-prc-penalties-extraterritorial-compliance","title":{"rendered":"Explaining the Major Amendments to China's \"Cybersecurity Law\": How Should Companies Respond to Strengthened Penalties and Expanded Extraterritorial Application?"},"content":{"rendered":"\n

The “Cybersecurity Law of the People’s Republic of China” (Cybersecurity Law, Chinese original: \u4e2d\u534e\u4eba\u6c11\u5171\u548c\u56fd\u7f51\u7edc\u5b89\u5168\u6cd5), which serves as the cornerstone of China’s cybersecurity regulations, has reached a significant turning point. On October 28, 2025, the Standing Committee of the National People’s Congress announced amendments to this law, which will take effect on January 1, 2026. Read more<\/a>.<\/p>\n\n\n\n

This new law marks the first major revision since its implementation in 2017 and goes beyond mere textual amendments. It significantly strengthens legal responsibilities, addresses new technologies such as artificial intelligence (AI), and expands the extraterritorial application of law enforcement. These changes are crucial for Japanese companies conducting business in China and cannot be overlooked.<\/p>\n\n\n\n

This article will outline the background of this major revision to the Cybersecurity Law, detail the specific amendments, and discuss the practical responses required from Japanese companies.<\/p>\n\n\n\n

\n
\n<\/span><\/div>\n