New Regulations on Cybersecurity Supervision and Inspection Released, Clarifying Inspection Targets, Content, and More

On August 7, the Ministry of Public Security issued the "Measures for the Supervision and Inspection of Cybersecurity by Public Security Organs," which will take effect on October 1, 2026. The "Measures for the Supervision and Inspection of Cybersecurity by Public Security Organs" consists of 23 articles and mainly covers six areas: First, it clarifies the subjects of supervision and inspection, including network operators, data processors, and personal information processors; Second, it specifies the methods of supervision and inspection, including online inspections, offline verifications, routine checks, and special inspections; Third, it outlines the content of supervision and inspection, including whether the subjects being inspected fulfill their statutory cybersecurity obligations and key inspection matters during the security period of significant events; Fourth, it defines the supervision and inspection mechanism, requiring enhanced departmental coordination and joint inspections under the overall guidance of national cybersecurity and data security mechanisms to reduce the burden on enterprises; Fifth, it clarifies the application of inspection results, stating that public security organs will take measures such as urging rectification, sending public security warning letters, and imposing penalties based on inspection outcomes; Sixth, it specifies relevant legal responsibilities, outlining the legal obligations of public security organs and their staff regarding neglect of duty, abuse of power, and leakage of state secrets.