The launch of digital identity

On July 15, 2025, China officially introduced digital identities (digital IDs) – a centralized, state-controlled system for authenticating individuals online. The National Cyber ID Authentication consists of a combination of numbers and letters and is mandatory for using many online services. To register, citizens must upload their identity documents, have their face scanned, and provide… Continue reading The launch of digital identity

Proxy cyberwarfare with AI agents

The risk that autonomous AI agents will independently detect vulnerabilities and exploit them as attack vectors is no longer a futuristic scenario – it has become a tangible and rapidly escalating threat. Unlike traditional tools for automated vulnerability scanning, modern AI agents like AutoGPT or SWE-agent operate with a high degree of autonomy. They can… Continue reading Proxy cyberwarfare with AI agents

New Regulations for Data Audits

On February 14, 2025, the Cyberspace Administration of China (CAC) published the Administrative Measures for Compliance Audits on the Protection of Personal Data, which will come into effect on May 1, 2025. The new regulations apply to all companies in China that process personal data and define clear requirements regarding the frequency of self-assessments as… Continue reading New Regulations for Data Audits

Republican AI Policy, China, and Europe

The Trump administration plans to immediately repeal the strict AI regulations introduced by President Joe Biden at the end of 2023, considering them stifling to innovation. Instead, a laissez-faire approach will be pursued, where the tech industry largely self-regulates. Agencies staffed with industry representatives will evaluate AI models and protect against foreign threats. This approach… Continue reading Republican AI Policy, China, and Europe

National Cyberspace ID

China is on the verge of introducing a national Cyberspace ID, which could fundamentally change access to online platforms. The National Cyber ID Authentication is expected to consist of a combination of numbers and letters and will be mandatory for using many online services. To register, citizens will need to upload their identification documents, undergo… Continue reading National Cyberspace ID

Violation of data protection: RMB 50 million fine

On September 6, 2023, after a 14-month review, the Cyberspace Administration of China (CAC) announced that the private platform China National Knowledge Infrastructure (CNKI) was fined RMB 50 million for the unlawful processing of personal data. CNKI is one of the leading academic platforms, digital learning platforms and knowledge bases in China, and its main operators… Continue reading Violation of data protection: RMB 50 million fine

Cybersecurity Law: Fines Significantly Increased

The Cybersecurity Law (CSL), China’s first fundamental law to comprehensively regulate cybersecurity issues, is about to undergo its first revision. A key feature of the proposed amendments is a significant increase in penalties for network operators and critical infrastructure operators that fail to comply with relevant cybersecurity protection obligations. For example, the fine range for… Continue reading Cybersecurity Law: Fines Significantly Increased

Compliance Requirements for Software Development Kits (SDK)

China continues to regulate the collection of private data in apps. For example, the importance of compliance with software development kits (SDKs) has increased significantly. Since June 2021, the authorities have been cracking down on the illegal use of SDKs in apps with SDK Security Special Actions. A software development kit is a collection of… Continue reading Compliance Requirements for Software Development Kits (SDK)

Establishment of Corporate IP Compliance

In the context of building a dual circulation system and creating a unified domestic market, China is guiding all enterprises to strengthen their compliance management to prevent business risks at home and abroad, promote modernization and transformation, and improve competitiveness. The compliance system is to cover areas such as market transactions, environment, human resources, finance,… Continue reading Establishment of Corporate IP Compliance

New Data Exchanges in China

On April 10, 2022, the Chinese government announced to accelerate the construction of the unified domestic market. Part of this is to also establish a data market to promote Big Data applications and AI development, focusing on data security and control of cross-border data transfer. To be allowed to provide data outside China, data processors… Continue reading New Data Exchanges in China