Cybersecurity

China’s New Military Facilities Construction Regulation: Site Data Handling and Access Checks for Project Teams

Information date: 30 September 2026 — On 5 June 2025, People's Daily reported that a Central Military Commission order signed by Xi Jinping released the Regulation on the Construction of Military Facilities, covering pla

China Cross-Border Data Transfer Case: Security Assessment vs Standard Contract

Information date: 15 September 2026 — A foreign-invested manufacturer in China needs to transfer employee and customer data to its overseas headquarters. Under China's cross-border data rules, important data or personal

China network-data risk assessment tool: Map scope, evidence and 15-working-day remediation reporting

Information date: 2 September 2026 — China’s Network Data Security Risk Assessment Measures took effect on 20 August 2026. They turn risk assessment into an evidence-governance process: an organisation must define the as

China’s Privacy Oversight Rules: 3 Compliance Moves for Foreign Firms

China's cyberspace regulator released draft rules forcing major personal-data handlers — 10 million people or more — to install independent oversight committees, name senior privacy officers, and disclose third-party data tools. Three compliance moves before comments close September 7.

Do Foreign Companies Need to Register Biometric Systems in China?

Do Foreign Companies Need to Register Biometric Systems in China? Yes—foreign companies operating in China must register biometric systems that collec

China’s New Military Facilities Construction Regulation: Site Data Handling and Access Checks for Project Teams

Information date: 30 September 2026 — On 5 June 2025, People's Daily reported that a Central Military Commission order signed by Xi Jinping released the Regulation on the Construction of Military Facilities, covering pla

China Cross-Border Data Transfer Case: Security Assessment vs Standard Contract

Information date: 15 September 2026 — A foreign-invested manufacturer in China needs to transfer employee and customer data to its overseas headquarters. Under China's cross-border data rules, important data or personal

China network-data risk assessment tool: Map scope, evidence and 15-working-day remediation reporting

Information date: 2 September 2026 — China’s Network Data Security Risk Assessment Measures took effect on 20 August 2026. They turn risk assessment into an evidence-governance process: an organisation must define the as

China’s Privacy Oversight Rules: 3 Compliance Moves for Foreign Firms

China's cyberspace regulator released draft rules forcing major personal-data handlers — 10 million people or more — to install independent oversight committees, name senior privacy officers, and disclose third-party data tools. Three compliance moves before comments close September 7.

Do Foreign Companies Need to Register Biometric Systems in China?

Do Foreign Companies Need to Register Biometric Systems in China? Yes—foreign companies operating in China must register biometric systems that collec

What Penalties Do Foreign Companies Face for Biometric Non-Compliance in China?

What Penalties Do Foreign Companies Face for Biometric Non-Compliance in China? Foreign companies operating in China face penalties of up to 50 millio