China Amends Cybersecurity Law and Incident Reporting Regime to Address AI and Infrastructure Risks

China is updating its cybersecurity framework to sharpen AI safety controls and clarify incident reporting obligations for onshore infrastructure, with formal amendments to the Cybersecurity Law released in October 2025 by the Standing Committee of the National People’s Congress.

The changes, which will take effect on 1 January 2026, are the first major update to the law since its 2017 enactment and are designed to align the CSL with newer legislation and emerging risks, including those related to artificial intelligence and cross-border cyber threats. Among the revisions, the amendments broaden enforcement provisions, raise penalty thresholds, and expand liability for violations, with particular attention paid to multinational companies.

The post highlights these as some of the more consequential shifts for onshore operations, while noting the broader regulatory trend toward proactive AI and cyber governance. Read more at Inside Privacy, according to Inside Privacy.