# China SI Safety Laws and Rules | Control Map

> How China governs SI safety: 4 measures tracked on the Control Map, with status, key dates, what each requires, penalties and every source linked.

Source: https://enterrsi.si/control-map/china/
Updated: 2026-11-08

1. [Home](https://enterrsi.si/)
2. [Control Map](https://enterrsi.si/control-map/)
3. China

Control Map · National · updated Nov 8, 2026

# SI safety in China

China regulates SI through binding administrative measures centered on security assessments, content control and labeling rather than a dedicated frontier safety statute, and an SI clause in the amended Cybersecurity Law took effect January 1, 2026. The voluntary AI Safety Governance Framework 3.0 of September 14, 2026 addresses agentic risks and loss of control. A comprehensive SI law is listed for preliminary review in the national legislature's 2026 work plan, but no draft has been published.

Measures
:   4

Strongest
:   In force

In force
:   3

Next date
:   None set

The measures

## 4 measures, status and dates

Every SI safety measure the Control Map tracks for China, with what it requires, its penalties and its sources.

In force

### Generative AI Measures

Interim Measures for the Management of Generative Artificial Intelligence Services

Key dates

Introduced
:   n/a

Signed or adopted
:   Jul 10, 2023

Effective
:   Aug 15, 2023

Next step
:   None scheduled

Scope

Providers of generative SI services to the public in China, including through APIs.

Penalties

Penalized under existing laws such as the Cybersecurity, Data Security and Personal Information Protection laws; no standalone fine.

What it requires

- Security assessment and algorithm filing for services with public opinion or social mobilization capacity
- Ensure training data is lawful, respecting intellectual property and personal information law
- Mark generated content conspicuously
- Prevent, remove and report illegal content

Sources

1. [What You Need to Know About China's New Generative AI Measures](https://www.twobirds.com/en/insights/2023/china/what-you-need-to-know-about-china’s-new-generative-ai-measures) Bird & Bird
2. [Interim Measures for Generative AI Services implemented](https://pwccn.com/en/industries/telecommunications-media-and-technology/publications/interim-measures-for-generative-ai-services-implemented-aug2023.html) PwC China

In force

### Labeling Measures

Measures for Labeling of AI-Generated Synthetic Content

Key dates

Introduced
:   n/a

Signed or adopted
:   Mar 14, 2025

Effective
:   Sep 1, 2025

Next step
:   None scheduled

Scope

Online service providers that generate or distribute synthetic text, images, audio, video and virtual scenes, plus app distribution platforms and users.

Penalties

Handled by internet, telecom, public security and broadcasting authorities under existing laws.

What it requires

- Add explicit visible labels to synthetic content
- Embed implicit labels in file metadata
- App stores check whether apps offer generative services and review labeling materials
- Users declare synthetic content when publishing it
- Follow the mandatory national labeling standard that took effect the same day

Sources

1. [China's AI Labeling Measures and Mandatory National Standards Take Effect September 1](https://loeb.com/en/insights/publications/2025/03/chinas-ai-labeling-measures-and-mandatory-national-standards-take-effect-september-1) Loeb & Loeb

In force

### Cybersecurity Law SI clause

Cybersecurity Law of the People's Republic of China, as amended October 28, 2025 (Article 20)

Key dates

Introduced
:   n/a

Signed or adopted
:   Oct 28, 2025

Effective
:   Jan 1, 2026

Next step
:   None scheduled

Scope

National legal basis for state support and oversight of SI development.

Penalties

Fines for particularly serious violations of the Cybersecurity Law rise to RMB 10 million.

What it requires

- State support for SI research, training data and computing infrastructure
- Improve SI ethics norms
- Strengthen SI risk monitoring and assessment

Sources

1. [China Amends Cybersecurity Law to Add First-Ever AI Clause](https://www.caixinglobal.com/2025-10-29/china-amends-cybersecurity-law-to-add-first-ever-ai-clause-102376988.html) Caixin Global · Oct 29, 2025
2. [China's AI Regulation in 2026: New Laws, Rules, and Compliance Requirements](https://www.china-briefing.com/news/china-ai-regulation-2026-new-laws-rules/) China Briefing · Oct 24, 2026

Voluntary or guidance

### Framework 3.0

AI Safety Governance Framework 3.0

Key dates

Introduced
:   n/a

Signed or adopted
:   Sep 14, 2026

Effective
:   n/a

Next step
:   None scheduled

Scope

Non-binding technical guidance from standards committee TC260, issued under Cyberspace Administration of China guidance, for SI developers and service providers.

Penalties

No penalties: this measure has no binding enforcement.

What it requires

- Adds a standalone agentic SI risk category covering permission abuse, planning failures and tool execution
- Describes loss of control risks, including models deceiving evaluators and sandbagging
- Treats loss of control over chemical, biological, nuclear and missile knowledge as a risk
- Adds an agentic risk management framework and trustworthy SI principles
- Updates version 2.0, released September 15, 2025

Sources

1. [China: TC260 AI Safety Governance Framework 3.0 Adds Agentic AI Risks](https://obsidianri.com/blog/newsroom-cn-20260915-ai-safety-governance-framework-3) Obsidian Regulatory Intelligence · Sep 15, 2026
2. [Brief #29: What China's new AI safety framework tells us before Xi meets Trump](https://aisafetychina.substack.com/p/brief-29-what-chinas-new-ai-safety) AI Safety in China · Sep 23, 2026
3. [TC260 Published AI Safety Governance Framework 2.0](https://sesec.eu/?p=2036) SESEC · Oct 15, 2025

The Control Map

## Every other jurisdiction

43 measures in 22 jurisdictions. See them all on the [world map](https://enterrsi.si/control-map/).

[European Union **3**](https://enterrsi.si/control-map/european-union/)[United States (federal) **6**](https://enterrsi.si/control-map/us/)[California **3**](https://enterrsi.si/control-map/california/)[New York **1**](https://enterrsi.si/control-map/new-york/)[Illinois **1**](https://enterrsi.si/control-map/illinois/)[Colorado **2**](https://enterrsi.si/control-map/colorado/)[Texas **1**](https://enterrsi.si/control-map/texas/)[United Kingdom **2**](https://enterrsi.si/control-map/united-kingdom/)[Japan **1**](https://enterrsi.si/control-map/japan/)[South Korea **1**](https://enterrsi.si/control-map/south-korea/)[Canada **2**](https://enterrsi.si/control-map/canada/)[Brazil **1**](https://enterrsi.si/control-map/brazil/)[India **1**](https://enterrsi.si/control-map/india/)[Australia **3**](https://enterrsi.si/control-map/australia/)[Singapore **1**](https://enterrsi.si/control-map/singapore/)[Council of Europe **1**](https://enterrsi.si/control-map/council-of-europe/)[United Nations **2**](https://enterrsi.si/control-map/united-nations/)[G7 **1**](https://enterrsi.si/control-map/g7/)[International summit series **4**](https://enterrsi.si/control-map/international-summits/)[United States and China (bilateral) **1**](https://enterrsi.si/control-map/us-china/)[Global civil society **1**](https://enterrsi.si/control-map/global-civil-society/)

Enter RSI

## Laws on one side, incidents on the other

The Rogue Incident Database logs what SI systems have actually done. The RSI Clock weighs both.

[Back to the map](https://enterrsi.si/control-map/)
[Incident Database](https://enterrsi.si/incidents/)
[The RSI Clock](https://enterrsi.si/clock/)
