China Implements New Cybersecurity Regulations in 2026

As of January 1, 2026, China has enacted an amended cybersecurity law, marking a significant update to its regulatory framework since 2017. This law alters the response protocols for organizations facing cyber incidents and enhances the authority of regulators to impose penalties, including jurisdiction over foreign entities. Additionally, the Incident Reporting Measures, effective from November 1, 2025, establish a comprehensive framework for reporting cybersecurity incidents by network operators and critical information infrastructure operators.