China: Cybersecurity Law of the People's Republic of China (as amended October 2025)

1. Chapter I: General Provisions
2. Chapter II: Support and Promotion of Cybersecurity
3. Chapter III: Network Operations Security
4. Section 1: General Regulations
5. Section 2: Operations Security for Critical Information Infrastructure
6. Chapter IV: Network Information Security
7. Chapter V: Monitoring, Early Warning, and Emergency Response
8. Chapter VI: Legal Liability
9. Chapter VII Supplementary Provisions
10. Article 1: This Law is formulated to ensure cybersecurity; safeguard
11. Article 2: This Law applies to the construction, operation, maintenance, and
12. Article 3: Cybersecurity work upholds the leadership of the Chinese
13. Article 4: The state adheres to giving equal emphasis to cybersecurity and
14. Article 5: The state formulates and continuously improves the national
15. Article 6: The state adopts measures to monitor, prevent, and address
16. Article 7: The state advocates honest, trustworthy, healthy, and civilized
17. Article 8: The state actively conducts international exchanges and cooperation
18. Article 9: The national cyberspace affairs (网信) departments are responsible
19. Article 10: When conducting business and service activities, network
20. Article 11 Those who construct or operate networks, or provide services
21. Article 12 Network-related industry organizations shall, in accordance with
22. Article 13 The state protects the right of citizens, legal persons, and other
23. Article 14: The state supports the research, development, and utilization of
24. Article 15 Any individual or organization has the right to report acts
25. Article 16 The state establishes and improves the cybersecurity standards
26. Article 17 The State Council and the people’s governments of provinces,
27. Article 18 The state advances the construction of a society-oriented5
28. Article 19 The state encourages the development of technologies for the
29. Article 20 The state supports basic theoretical research in artificial intelligence
30. Article 21 People’s governments at all levels and their relevant departments
31. Article 22 The state provides support to enterprises, institutions of higher
32. Article 23: The state implements the ranked cybersecurity protection system.6
33. Article 24 Network products and services shall comply with the mandatory
34. Article 25: Key network equipment and specialized cybersecurity products
35. Article 26 Where network operators handle network access for users and
36. Article 27 Network operators shall formulate emergency response plans for
37. Article 28 Entities conducting cybersecurity certification, testing, risk
38. Article 29 No individual or organization shall engage in activities endangering
39. Article 30 Network operators shall provide technical support and assistance to
40. Article 31 The state supports cooperation among network operators in areas
41. Article 32 Information obtained by cyberspace affairs departments and
42. Article 33 On the basis of the ranked cybersecurity protection system, the state
43. Article 34 In accordance with the division of responsibilities prescribed by the
44. Article 35 The construction of critical information infrastructure shall ensure
45. Article 36 In addition to the provisions of Article 21 of this Law, operators of
46. Article 37 Where operators of critical information infrastructure procure
47. Article 38 Where operators of critical information infrastructure procure
48. Article 39 Personal information and important data collected or generated by
49. Article 40 Operators of critical information infrastructure shall, either
50. Article 41 The national cyberspace affairs departments shall coordinate with
51. Article 42 Network operators shall strictly protect the secrecy of the user
52. Article 43 Where network operators collect or use personal information, they
53. Article 44 Network operators shall not disclose, tamper with, or damage the
54. Article 45 Where individuals discover that a network operator has collected or
55. Article 46 No individual or organization shall steal personal information or
56. Article 47 Departments that, in accordance with law, bear responsibilities for
57. Article 48 Every individual or organization shall be responsible for their
58. Article 49 Network operators shall strengthen the management of information
59. Article 50 Electronic information sent, and application software provided, by
60. Article 51 Network operators shall establish mechanisms for complaints and
61. Article 52 The national cyberspace affairs departments and relevant
62. Article 53 The state establishes systems for cybersecurity monitoring and early
63. Article 54 Departments responsible for the security protection of critical
64. Article 55 The national cyberspace affairs departments shall coordinate with
65. Article 56 When the risk of cybersecurity incidents increases, the relevant
66. Article 57 When a cybersecurity incident occurs, emergency response plans for
67. Article 58: Where the relevant departments of people’s governments at or
68. Article 59 Where sudden public security incidents (突发事件) or production
69. Article 60 Where necessary to safeguard national security and social and
70. Article 61 Where network operators fail to perform the cybersecurity
71. Article 62 Where any of the following acts is committed in violation of the
72. Article 50 of this Law, the relevant main oversight departments shall order rectification
73. Article 63 Where, in violation of the provisions of Article 25 of this Law, key
74. Article 64 Where a network operator violates the provisions of the first
75. Article 65 Where the provisions of Article 28 of this Law are violated in
76. Article 66 Where, in violation of the provisions of Article 29 of this Law, a
77. Article 67 Where operators of critical information infrastructure violate the
78. Article 68 Where, in violation of the provisions of Article 48 of this Law, a
79. Article 69 Where a network operator violates the provisions of Article 49 of
80. Article 70 Where there are violations of this Law, such violations shall, in
81. Article 71 Where any of the following acts is committed, handling and
82. Article 72 Where the operators of government networks for state agencies fail
83. Article 73 Where violations of this Law occur but circumstances exist that
84. Article 74 Where cyberspace affairs departments or relevant departments
85. Article 75 Where violations of this Law cause harm to others, civil liability shall
86. Article 76
87. Article 77 Where institutions, organizations, or individuals outside the People’s
88. Article 78 With respect to the operational security protection of networks that
89. Article 79 The Central Military Commission shall separately regulate the
90. Article 80: This Law shall enter into force on June 1, 2017.8

The outline comes from headings detected in the text, so it might miss some or include extras.

1. 第一章 总 则
2. 第二章 网络安全支持与促进
3. 第三章 网络运行安全
4. 第一节 一般规定
5. 第二节 关键信息基础设施的运行安全
6. 第四章 网络信息安全
7. 第五章 监测预警与应急处置
8. 第六章 法律责任
9. 第七章 附 则
10. 第一节 一 般 规 定
11. 第六章 法 律 责 任

The outline comes from headings detected in the text, so it might miss some or include extras.