China Expands Public Safety Inspection Powers Throughout Company Networks, Information, and International Operations
China’s Ministry of Public Safety has finalized sweeping new enforcement rules that increase police inspection powers past normal web companies to embody company information processing, private info administration, and worldwide information transfers.
The rules, issued on August 7 as Ministry of Public Safety Decree No. 176 and titled the “Measures for Public Safety Organs to Supervise and Examine Our on-line world Safety,” will formally take impact on October 1, 2026. The framework supersedes Decree No. 151, the web security inspection guidelines enacted in 2018.
The statutory scope shifts police oversight from conventional “web security” to a unified definition of “our on-line world safety,” integrating community infrastructure, information governance, and data content material security. The regulation explicitly expands police jurisdiction over eight classes of entities: web service suppliers, public entry suppliers, community builders and operators, crucial info infrastructure operators, software program product distributors, information processors, and private info handlers.
Decree No. 176 formally aligns police inspection authority with China’s broader authorized structure, incorporating enforcement mechanisms underneath the Information Safety Regulation, the Private Data Safety Regulation, and the Rules on Cyber Information Safety Administration.
The regulatory framework imposes heightened scrutiny on worldwide information operations and international tech integrations. Information processors managing cross-border information transfers, multinational company networks, and foreign-facing software program functions are topic to necessary checks masking asset stock, information classification, algorithm security, and worldwide person logs. Beneath the 11 key inspection areas outlined in Article 7, firms working in China should keep capabilities to help public safety organs with nationwide safety upkeep, counter-terrorism investigations, and prison inquiries, together with tracing information flows throughout worldwide community boundaries.
The measures transition public safety inspections from procedural compliance evaluations to lively technical validation. Municipal-level public safety businesses are licensed to execute distant technical testing—together with lively vulnerability scanning, penetration testing, and algorithm auditing—on company programs exterior of designated crucial info infrastructure.
To stop redundant inspections, Decree No. 176 requires police to ascertain collaborative mechanisms with sector-specific regulators. For programs categorized at Grade 3 or larger underneath China’s Multi-Stage Safety Scheme (MLPS), public safety organs will reuse inspection outcomes gathered by different authorities ministries throughout the identical calendar yr.
The regulation additionally establishes heightened enforcement protocols throughout main nationwide safety occasions, requiring key infrastructure operators and cross-border information handlers to execute lively threat assessments, conduct emergency response drills, and keep direct incident reporting strains with public safety businesses. Police businesses are permitted to retain vetted, state-backed third-party cybersecurity corporations to conduct technical testing, offered these technical companions bear background checks and cling to strict confidentiality protocols.
