China's Cyberspace Administration (CAC), MIIT and Ministry of Public Security jointly issued the Measures for Network Data Security Risk Assessment on June 18, 2026, effective August 20, 2026. Handlers of 'important data' must conduct a risk assessment at least once a year and file the report with authorities within 20 working days of completion; all other data handlers are encouraged to self-assess at least once every three years. Regulators can order rectification and suspend data processing if unacceptable risks are found and not fixed.
Home › Founders News › Regulations
China's Network Data Security Risk Assessment Measures take effect Aug 20, 2026
Why this matters for founders
Any China startup handling large volumes of user or business data (SaaS, fintech, consumer apps) should map now whether its datasets qualify as 'important data', and if so budget for an annual internal risk assessment plus a 20-working-day report filing under the new rules.
Source: Hunton Andrews Kurth (Privacy & Cybersecurity Law Blog)
Related updates
More that helps you.
AI transparency rules now enforced in Sweden: label chatbots and AI content
From 2 August 2026 the EU AI Act's transparency obligations (Article 50) are enforced and apply directly in Sweden: businesses must tell users when they are interacting with a chat…
Brazil Pix rule IN BCB 766: 80-day MED dispute window, layered fraud tracing
Instrucao Normativa BCB no 766 (published in the DOU on 29 July 2026) upgrades Pix fraud handling in phases. From 10 August 2026 a layered tracking system (a new transaction-depth…
China cuts data-compliance load for small processors, effective Sept 1, 2026
The CAC and Ministry of Public Security jointly issued the Simplified Personal Information Protection Measures for Small-Scale Processors, published July 24, 2026 and effective Sep…
China eases data-privacy compliance for small processors under 100,000 users
On 22 July 2026 the Cyberspace Administration of China and the Ministry of Public Security released Simplified Measures for 'small processors' that handle the personal information…
Get briefs like this tuned to you.
In the app, Founder Briefs are personalized to your country, industry and stage, and you can save the ones that matter.
See plans →
Keep exploring
Related across the site
ToolDocuSignDocuSign lets you send documents for legally binding electronic signature and track their status. It handles contracts, NDAs, offer letters, and other agreements with an audit trail.ToolLegalZoomLegalZoom helps you form an LLC or corporation and access legal documents, registered agent service, and attorney consultations. It walks non-lawyers through business formation filings.ChecklistFind a small business lawyer you trustFigure out what legal help you actually need, vet and hire the right small business lawyer, and control costs with clear scope and smart preparation.ChecklistHire your first employee the legal wayEverything a first-time employer needs, in order: classification, registration, workers' comp, payroll, and a first week that sets your new hire up to succeed.ChecklistStart a moving company the right wayStart a moving company with the right truck, permits, and pricing, plus the marketing that keeps the calendar full.GuideBook an annual legal checkup, stay safeContracts drift, laws change, and policies go stale. A once-a-year legal review with your lawyer catches problems while they are small, cheap, and fixable on your schedule.