In a significant move to bolster artificial intelligence (AI) development and governance, China’s Standing Committee of the National People’s Congress (NPC) has passed revisions to the Cybersecurity Law. The amendments, approved on October 28, 2025, during the 18th session of the 14th NPC Standing Committee, will take effect on January 1, 2026. The revised law emphasizes national support for foundational AI research, algorithm development, and the construction of critical infrastructure such as training data resources and computing power. A newly added provision underscores the importance of advancing AI ethics, enhancing risk monitoring, and ensuring safety oversight to promote the responsible application and growth of AI technologies. Additionally, the amendments encourage innovative cybersecurity management practices, including the integration of AI and other emerging technologies to elevate protection standards. The revisions also refine legal liabilities for activities that compromise network security, increase penalties for violations, and expand extraterritorial application where necessary. Furthermore, the updated law enhances coordination with the Data Security Law and the Personal Information Protection Law to ensure precision, effectiveness, and consistency in legal frameworks. Since its initial enactment in 2016, the Cybersecurity Law has played a pivotal role in curbing harmful cyber activities and fostering a safer digital environment. However, persistent challenges such as network intrusions, cyberattacks, and the spread of illegal content highlight the ongoing complexities of maintaining cybersecurity. The latest amendments aim to address these issues while aligning with China’s broader strategic goals in AI and digital governance.
