China Implements New Data Security Risk Assessment Measures

• •New risk assessment measures for network data security will take effect on August 20, 2026.
• •Important data processors are mandated to conduct annual risk assessments and report findings.
• •The measures aim to standardize data security practices across various sectors in China.

On August 4, 2026, the CAC announced new measures for regulating network data security risk assessments, effective from August 20, 2026. These measures, approved by the Ministry of Industry and Information Technology and the Ministry of Public Security, aim to standardize risk assessment activities for network data within China. They require important data processors to conduct annual risk assessments and report findings to relevant authorities. The guidelines emphasize the need for compliance with existing data security laws and encourage third-party evaluations. The initiative is part of a broader effort to enhance data security and protect sensitive information across various sectors.