{"id":71902,"date":"2026-04-28T00:40:58","date_gmt":"2026-04-27T15:40:58","guid":{"rendered":"https:\/\/monolith.law\/en\/?p=71902"},"modified":"2026-08-24T19:01:58","modified_gmt":"2026-08-24T10:01:58","slug":"china-cybersecurity-law-prc-penalties-extraterritorial-compliance","status":"publish","type":"post","link":"https:\/\/monolith.law\/en\/general-corporate\/china-cybersecurity-law-prc-penalties-extraterritorial-compliance","title":{"rendered":"Explaining Major Amendments to China's \"Cybersecurity Law\": How Should Companies Respond to Tougher Penalties and Broader Extraterritorial Application?"},"content":{"rendered":"\n

The “Cybersecurity Law of the People’s Republic of China” (Cybersecurity Law, Chinese original: \u4e2d\u534e\u4eba\u6c11\u5171\u548c\u56fd\u7f51\u7edc\u5b89\u5168\u6cd5), which serves as one of the cornerstones of China’s cybersecurity regulations, has reached a historic turning point. On October 28, 2025, the Standing Committee of the National People’s Congress announced significant amendments to this law, which will take effect on January 1, 2026. Read more<\/a>.<\/p>\n\n\n\n

This is the first major revision since its implementation in 2017. It significantly expands liabilities, addresses emerging technologies such as artificial intelligence (AI), and increases the extraterritorial application. Understanding these changes is crucial for Japanese companies operating in China to ensure legal compliance.<\/p>\n\n\n\n

This article will outline the background of this major revision to the Cybersecurity Law, explain amendments in detail, and present changes Japanese companies must adopt.<\/p>\n\n\n\n

\n
\n<\/span><\/div>\n