Excerpt from Law.asia Article, Published on November 3, 2025

China’s Revised Cybersecurity Law, approved by the Standing Committee of the National People’s Congress, marks the first major update to the legislation since it took effect in 2017. The amended law, which will be enforced beginning January 1, 2026, introduces stronger oversight, higher penalties, and broader accountability for violations involving both domestic and overseas entities.

Under the Revised framework, authorities gain expanded powers to enforce cybersecurity compliance. Regulators can now impose financial penalties without prior warnings when companies fail to meet their obligations. In a significant shift, authorities may also disable non – compliant apps, adding a new layer of consequence to cybersecurity violations.

The new law introduces tougher fines for the illegal sale of network equipment and security products, with penalties reaching up to RMB10 million (USD 1.4 million) for companies and RMB1 million for individuals found responsible for damaging critical information infrastructure. In severe cases, businesses may face license revocation or suspension of operations.

One of the most notable changes in the Revised Cybersecurity Law is the expansion of extraterritorial jurisdiction. While the previous version only applied to acts threatening “critical information infrastructure,” the new law extends to all overseas activities that endanger China’s cybersecurity. This change highlights China’s intent to strengthen its digital sovereignty and enhance control over cross – border data activities.

Additionally, the updated legislation improves consistency across China’s legal framework by aligning with the Personal Information Protection Law (PIPL) and the Civil Code, ensuring that network operators handle personal data responsibly and transparently.

This legal overhaul signals China’s growing focus on cyber governance and global accountability, reinforcing its position on data protection and national security.

To delve deeper into this topic, Visit Law.asia.