AI 产品出海与入华规则清单Rules Checklist for AI Products Going Global and Entering China

已出台Promulgated

2024 年 6 月 13 日通过，2024 年 7 月 12 日刊于欧盟官方公报。Adopted on June 13, 2024, and published in the Official Journal of the European Union on July 12, 2024.

已生效In force

2024 年 8 月 1 日生效（原文 Article 113，公布后第 20 日）。原始文本的分阶段适用日逐个列明：主体适用日 2026 年 8 月 2 日；第一章、第二章（含 Article 5 禁止性实践）自 2025 年 2 月 2 日适用；第三章第四节、第五章（通用目的 AI 模型义务）、第七章、第十二章与 Article 78 自 2025 年 8 月 2 日适用（Article 101 除外）；Article 6(1) 及对应义务自 2027 年 8 月 2 日适用（附件 I 高风险过渡）。Entered into force on August 1, 2024 (Article 113 of the text, the twentieth day after publication). The original text's phased application dates, listed one by one: the main application date is August 2, 2026; Chapters I and II (including the Article 5 prohibited practices) apply from February 2, 2025; Chapter III Section 4, Chapter V (general-purpose AI model obligations), Chapter VII, Chapter XII and Article 78 apply from August 2, 2025 (Article 101 excepted); Article 6(1) and its corresponding obligations apply from August 2, 2027 (the Annex I high-risk transition).

执法已动Enforcement

部分已动。禁止性实践与通用目的 AI 义务已过适用日；罚则在条文内落地，Article 99 定禁止性实践最高罚 3500 万欧元或全球年营业额 7% 取高者，通用目的 AI 罚则见 Article 101。Partly in motion. The prohibited practices and the general-purpose AI obligations are past their application dates; the penalty provisions are in the text: Article 99 sets the top fine for prohibited practices at EUR 35 million or 7% of total worldwide annual turnover, whichever is higher, and the general-purpose AI penalties are at Article 101.

待核Pending

无日期待核；引用时必须注明所据为合并版（2026 年 7 月 27 日版）。No date is pending; citations must state that they rest on the consolidated version (the version of July 27, 2026).

已出台Promulgated

2016 年 4 月 27 日通过，2016 年 5 月 4 日刊于官方公报 OJ L 119。Adopted on April 27, 2016, and published in the Official Journal, OJ L 119, on May 4, 2016.

已生效In force

Article 99(1) 定公布后第 20 日生效，Article 99(2) 定自 2018 年 5 月 25 日起适用，无再分阶段。附带程序规则 Regulation (EU) 2025/2518 的跨境执法程序自 2027 年 4 月 2 日适用，不影响主体适用日。Article 99(1) sets entry into force on the twentieth day after publication, and Article 99(2) sets application from May 25, 2018, with no further phasing. The cross-border enforcement procedure under the accompanying procedural regulation, Regulation (EU) 2025/2518, applies from April 2, 2027, and does not change the main application date.

执法已动Enforcement

有。各成员国设有完全独立的监管机构负责监督与执法；Article 83 定行政罚款最高 2000 万欧元或企业全球年营业额 4% 取高者。Yes. Each member state has a fully independent supervisory authority responsible for monitoring and enforcement; Article 83 sets administrative fines at up to EUR 20 million or 4% of the undertaking's total worldwide annual turnover, whichever is higher.

待核Pending

无。None.

已出台Promulgated

2022 年 10 月 19 日通过，2022 年 10 月 27 日刊于官方公报 OJ L 277。Adopted on October 19, 2022, and published in the Official Journal, OJ L 277, on October 27, 2022.

已生效In force

Article 93(1) 定公布后第 20 日生效，即 2022 年 11 月 16 日。分阶段适用：主体自 2024 年 2 月 17 日适用；Article 24(2)(3)(6)、Article 33(3) 至 (6)、Article 37(7)、Article 40(13)、Article 43 与第四章第 4 至 6 节（超大平台与搜索引擎相关报告、审计、数据共享与监督规则）自 2022 年 11 月 16 日先行适用。Article 93(1) sets entry into force on the twentieth day after publication, that is, November 16, 2022. Application is phased: the main body applies from February 17, 2024; Article 24(2)(3)(6), Article 33(3) to (6), Article 37(7), Article 40(13), Article 43 and Chapter IV Sections 4 to 6 (the reporting, audit, data-sharing and supervision rules for very large platforms and search engines) applied earlier, from November 16, 2022.

执法已动Enforcement

有。欧盟委员会官网载，委员会于 2026 年 5 月 28 日依本法对 Temu 罚款 2 亿欧元，理由为未勤勉识别与评估其平台非法产品的系统性风险，该案程序于 2024 年 10 月 31 日正式开启。Yes. The European Commission's website records that on May 28, 2026 the Commission fined Temu EUR 200 million under this Act, for failing to diligently identify and assess the systemic risks of illegal products on its platform; the proceedings in that case were formally opened on October 31, 2024.

待核Pending

无。None.

已出台Promulgated

州长于 2024 年 5 月 17 日批准，州议会官网法案页记为 APPROVED by Governor May 17, 2024，并记 Became Law。Approved by the Governor on May 17, 2024; the General Assembly's official bill page records "APPROVED by Governor May 17, 2024" and records that it became law.

已生效In force

法案页记 EFFECTIVE May 17, 2024，但实体义务原本自 2026 年 2 月 1 日起适用；SB 25B-004 于 2025 年 8 月 28 日经州长批准，其官方摘要明示将 SB 24-205 各项要求的生效日延至 2026 年 6 月 30 日；其后 SB 26-189 已出台，官方摘要明示其废止并重订（repeals and reenacts）原条文，改为自动决策技术（ADMT）新规，开发者与部署者义务自 2027 年 1 月 1 日起。引用时不得再单写「2026 年 2 月 1 日生效」。The bill page records "EFFECTIVE May 17, 2024", but the substantive duties were originally to apply from February 1, 2026. SB 25B-004, approved by the Governor on August 28, 2025, states in its official summary that it delays the effective date of SB 24-205's requirements to June 30, 2026. After that, SB 26-189 was enacted; its official summary states that it repeals and reenacts the original provisions as a new automated decision-making technology (ADMT) regime, with developer and deployer duties from January 1, 2027. Citations must no longer write "effective February 1, 2026" on its own.

执法已动Enforcement

原法授予州总检察长专属执法权，违反构成科罗拉多消费者保护法下的欺骗性交易行为；本次打开的官方页面未见已发布的执法个案。The original Act gives the state Attorney General exclusive enforcement authority, and a violation is a deceptive trade practice under the Colorado Consumer Protection Act. The official pages opened in this round showed no published enforcement case.

待核Pending

2026 年 6 月 30 日至 2027 年 1 月 1 日之间原条文的实际可执行状态，及涉原法的联邦诉讼对执行的影响，未打开官方过渡条款与法院文件核实，标待核。The actual enforceability of the original provisions between June 30, 2026 and January 1, 2027, and the effect of federal litigation over the original Act on its enforcement, were not verified against the official transitional provisions or court documents, and are marked pending.

已出台Promulgated

HB 149 于 2025 年 6 月 22 日经州长签署（州议会官网进程页）。HB 149 was signed by the Governor on June 22, 2025 (the Legislature's official history page).

已生效In force

2026 年 1 月 1 日。州议会官网进程页记 Effective on 1/1/26，州总检察长官网消费者 AI 权利页亦记 Effective January 1, 2026。January 1, 2026. The Legislature's official history page records "Effective on 1/1/26", and the Attorney General's consumer AI rights page likewise records "Effective January 1, 2026".

执法已动Enforcement

执法机制已建。州总检察长官网已设 TRAIGA 说明页与 AI 投诉入口，明示总检察长有专属执法权、可发民事调查要求、可诉请民事罚款；本次打开的官方页面未见已公布的处罚个案。The enforcement mechanism is in place. The Attorney General's website has a TRAIGA explainer page and an AI complaint portal, and states that the Attorney General has exclusive enforcement authority, may issue civil investigative demands and may sue for civil penalties. The official pages opened in this round showed no published penalty case.

待核Pending

是否有首例执法个案，待核。Whether a first enforcement case exists is pending verification.

已出台Promulgated

2020 年经加州选民批准（加州隐私保护局 CPPA 官网明示 In 2020, California voters approved Proposition 24；州务卿官方选民指南收有 Prop 24 全文与分析）。Approved by California voters in 2020 (the California Privacy Protection Agency, CPPA, states on its website: "In 2020, California voters approved Proposition 24"; the Secretary of State's official voter guide carries the full text and analysis of Prop 24).

已生效In force

CPPA 官网明示 CPRA 对 CCPA 的修订于 2023 年 1 月 1 日生效（The CPRA amendments to the CCPA went into effect on January 1, 2023）；其自动决策技术（ADMT）、隐私风险评估与网络安全审计配套法规已于 2026 年 1 月 1 日生效。The CPPA states that the CPRA amendments to the CCPA went into effect on January 1, 2023. Its supporting regulations on automated decision-making technology (ADMT), privacy risk assessments and cybersecurity audits took effect on January 1, 2026.

执法已动Enforcement

有。CPPA 官网明示该局负责实施与执法，可调查、审计并提起行政执法行动。Yes. The CPPA states that it is responsible for implementation and enforcement, and may investigate, audit and bring administrative enforcement actions.

待核Pending

具体执法个案清单与罚款额，未逐个打开 CPPA 个案页核，标待核。The list of individual enforcement cases and their fine amounts was not verified case by case against the CPPA's case pages, and is marked pending.

已出台Promulgated

2024 年 9 月 28 日经州长批准并由州务卿存档，Chapter 817, Statutes of 2024（章本扉页文字已核；加州立法信息网法案状态页本次打开返回 403，未能直开，此缺口在此注明）。Approved by the Governor and filed with the Secretary of State on September 28, 2024, Chapter 817, Statutes of 2024 (the chapter title page was verified; the California Legislative Information bill status page returned a 403 in this round and could not be opened directly, a gap noted here).

已生效In force

条文义务自 2026 年 1 月 1 日起算，第 3111 条明示开发者须于 2026 年 1 月 1 日或之前完成首次公布。The duties in the text run from January 1, 2026; Section 3111 states expressly that a developer must complete its first publication on or before January 1, 2026.

执法已动Enforcement

条文本身未设专门罚则与执法机关条款；本次核查未见官方执法个案。The text itself sets no dedicated penalty or enforcement-authority provision, and this round's check found no official enforcement case.

待核Pending

执法路径（是否经不正当竞争法执行）原文无据，不写作定论；针对该法的诉讼进展未核官方文件，均标待核。The enforcement path (whether it runs through unfair competition law) has no basis in the text and is not written as a conclusion; litigation progress against the Act was not checked against official documents. Both are marked pending.

已出台Promulgated

2024 年 9 月 19 日经州长批准，Chapter 291, Statutes of 2024。其后 SB 1000 于 2026 年 9 月 30 日经州长批准并由州务卿存档，Chapter 861, Statutes of 2026，属紧急立法，自批准当日即时生效，修订第 22757.1 条至第 22757.5 条并新增后限期废止第 22757.1 条。Approved by the Governor on September 19, 2024, Chapter 291, Statutes of 2024. Afterwards, SB 1000 was approved by the Governor and filed with the Secretary of State on September 30, 2026, Chapter 861, Statutes of 2026; it is urgency legislation, effective immediately on approval, amending Sections 22757.1 to 22757.5 and newly providing for the later repeal of Section 22757.

已生效In force

原法第 22757.6 条定施行（operative）日期为 2026 年 1 月 1 日；其后 AB 853 于 2025 年 10 月 13 日经州长批准（Chapter 674），明示将该法施行日期推迟至 2026 年 8 月 2 日，并新增大型在线平台（2027 年 1 月 1 日起）与生成式 AI 托管平台义务。现行口径应记 2026 年 8 月 2 日，不得再单写 2026 年 1 月 1 日。SB 1000 未修订第 22757.6 条，2026 年 8 月 2 日施行日不变；SB 1000 的修订自 2026 年 9 月 30 日即时生效，覆盖范围与义务口径自该日起按修订后文本读。Section 22757.6 of the original Act set the operative date at January 1, 2026. Afterwards, AB 853, approved by the Governor on October 13, 2025 (Chapter 674), expressly delayed the operative date to August 2, 2026, and added duties for large online platforms (from January 1, 2027) and generative AI hosting platforms. The current reading is August 2, 2026; January 1, 2026 must no longer be written on its own. SB 1000 did not amend Section 22757.6, so the August 2, 2026 operative date stands; SB 1000's amendments took effect immediately on September 30, 2026, and coverage and duties are read under the amended text from that date.

执法已动Enforcement

经 SB 1000 修订的第 22757.4 条定每项违规民事罚款 5,000 美元、胜诉原告可获律师费，覆盖提供者、大型在线平台或拍摄设备制造商每持续一日计为一项独立违规，并新增豁免：本修订生效日前的行为、且在生效日后不违反本章的，先前诉讼不得维持。虚假声称系统主要功能为辅助技术的，不走第 22757.4 条，另按新增第 22757.1 条每项违规罚 50,000 美元，该条至 2029 年 1 月 1 日废止。本次打开的官方页面未见已公布的执法个案。Section 22757.4, as amended by SB 1000, sets a civil penalty of USD 5,000 per violation, with attorney's fees for a prevailing plaintiff; for a covered provider, a large online platform or a capture device manufacturer, each day of a continuing violation counts as a separate violation. It also adds a safe harbour: a prior action may not be maintained for conduct before the amendment's effective date that does not violate the chapter after that date. Falsely claiming that a system's primary function is assistive technology does not go through Section 22757.4; it is instead fined USD 50,000 per violation under the new Section 22757.1, which is repealed on January 1, 2029. The official pages opened in this round showed no published enforcement case.

待核Pending

无。原标待核的 SB 1000 修订（覆盖门槛、显性标识、验证工具、许可与执法条款）已按章本原文核清并入正文，待核解除。None. The SB 1000 amendments previously marked pending (coverage thresholds, manifest disclosure, verification tools, licensing and enforcement provisions) have been verified against the chaptered text and folded into this entry; the pending item is discharged.

已出台Promulgated

该条长期为现行法，编入 15 U. § 45；原始制定年份未打开 FTC 官网史页核，标待核。本条以 FTC 官网 2025 年 7 月修订的执法权限备忘为核查依据。The provision has long been current law, codified at 15 U. § 45; its original year of enactment was not checked against the FTC's official history page and is marked pending. This entry rests on the FTC's enforcement-authority memorandum, revised July 2025, on its website.

已生效In force

现行有效。备忘引第 5(a) 条原文，unfair or deceptive acts or practices in or affecting commerce are declared unlawful；并引第 45(n) 条对 unfair 的三要件定义（造成或可能造成消费者重大损害、消费者自身无法合理避免、且不被对消费者或竞争的抵消性利益所超过）。Currently in force. The memorandum quotes Section 5(a): "unfair or deceptive acts or practices in or affecting commerce are declared unlawful"; and quotes the three-part definition of "unfair" in Section 45(n) (causes or is likely to cause substantial injury to consumers, which is not reasonably avoidable by consumers themselves, and not outweighed by countervailing benefits to consumers or to competition).

执法已动Enforcement

有，且口径有回调。FTC 于 2024 年 9 月 25 日宣布 Operation AI Comply 执法行动（DoNotPay、Rytr、Ascend Ecom 等），官网原话为 Using AI tools to trick, mislead, or defraud people is illegal，与 there is no AI exemption from the laws on the books；同时 FTC 官网 2025 年文件显示其已重开并撤销 Rytr 同意令，理由是原投诉不足以支持第五条违反，说明 2025 年后的执法口径较 2024 年有收缩，引用时两面都要记。Yes, and the posture has partly rolled back. On September 25, 2024 the FTC announced its Operation AI Comply enforcement sweep (DoNotPay, Rytr, Ascend Ecom and others), stating on its website that "Using AI tools to trick, mislead, or defraud people is illegal" and that "there is no AI exemption from the laws on the books". At the same time, FTC documents from 2025 show that it reopened and set aside the Rytr consent order, on the ground that the original complaint could not support a Section 5 violation, which shows the post-2025 enforcement posture is narrower than in 2024; citations must record both sides.

待核Pending

不得把 2024 年的专案表述直接当作现行统一口径；单个 AI 案件是否仍按第五条推进，须以 FTC 官网个案页逐个核。The 2024 sweep's framing must not be taken directly as the current uniform posture; whether an individual AI case still proceeds under Section 5 must be checked case by case on the FTC's case pages.

已出台Promulgated

2011 年 3 月 29 日公布，法律第 10465 号（国家法令信息中心 law.go.kr 原文标注）。Promulgated on March 29, 2011, as Act No. 10465 (as annotated in the text at the National Law Information Center, law.go.kr).

已生效In force

2011 年 9 月 30 日施行（原文附则：公布后 6 个月施行）。此后多次修订；law.go.kr 现行页另有 2026 年 3 月 10 日部分修订（法律第 21445 号，2026 年 9 月 11 日施行版）与更晚修订并存，引用必须注明版本日期。In force from September 30, 2011 (the Addenda set effect six months after promulgation). It has been amended many times since; the current law.go.kr page carries, side by side, a partial amendment of March 10, 2026 (Act No. 21445, the version in force from September 11, 2026) and later amendments, so citations must state the version date relied on.

执法已动Enforcement

主管机关为个人信息保护委员会（PIPC）；本次未逐个打开 PIPC 处罚个案页核，个案标待核。The competent authority is the Personal Information Protection Commission (PIPC). This round did not open the PIPC's individual penalty case pages one by one; the cases are marked pending.

待核Pending

现行文本版本滚动较快，2027 年施行的一批修订条款与现行条文的对应关系待逐条核。The current text rolls forward quickly; how the batch of amendments taking effect in 2027 maps onto the current provisions remains to be checked article by article.

已出台Promulgated

通过与公布分开记。国会全体会议通过为 2024 年 12 月 26 日（科学技术信息通信部官网新闻稿明示）；公布为 2025 年 1 月 21 日，法律第 20676 号（law.go.kr 原文标注 2025. 21. 제정）。Passage and promulgation are recorded separately. The National Assembly passed the Act in plenary on December 26, 2024 (stated in a press release on the Ministry of Science and ICT website); it was promulgated on January 21, 2025, as Act No. 20676 (annotated in the law.go.kr text as enacted on 2025. 21).

已生效In force

2026 年 1 月 22 日（law.go.kr 原文标注 시행 2026. 22.，附则为公布后满 1 年施行；其中数字医疗器械相关部分为 2026 年 1 月 24 日）。January 22, 2026 (annotated in the law.go.kr text as in force from 2026. 22; the Addenda set effect one year after promulgation; the parts concerning digital medical devices are dated January 24, 2026).

执法已动Enforcement

韩国政府公开口径为施行初期设至少 1 年的罚款指导宽限期，以引导合规为主；本次未见官方公布的处罚个案，标待核。The Korean government's stated position is a guidance grace period of at least one year on fines in the early period after effect, aimed at guiding compliance. This round found no officially published penalty case; marked pending.

待核Pending

2026 年 1 月 20 日部分修订（法律第 21311 号）新增条款的分批施行日期须逐条对 law.go.kr 附则核，本次未逐条核完。The staged effective dates of the provisions added by the partial amendment of January 20, 2026 (Act No. 21311) must be checked article by article against the law.go.kr Addenda; this round did not finish that check.

已出台Promulgated

个人情报保护委员会（PPC）官网沿革记 2003 年 5 月 23 日成立、2003 年 5 月 30 日公布并部分施行，法律编号为平成 15 年 5 月 30 日法律第 57 号。The Personal Information Protection Commission (PPC) records in its official history that the Act was established on May 23, 2003, promulgated and partly brought into force on May 30, 2003, under Act No. 57 of May 30, 2003.

已生效In force

2005 年 4 月 1 日全面施行（PPC 官网沿革）。其后 2020 年修订法于 2020 年 6 月 5 日国会通过成立、6 月 12 日公布，全面施行日为 2022 年 4 月 1 日（PPC 官网修订页明示）。Fully in force from April 1, 2005 (PPC official history). The later 2020 amendment act was passed by the Diet on June 5, 2020 and promulgated on June 12, 2020, with full effect from April 1, 2022 (stated on the PPC's amendment page).

执法已动Enforcement

PPC 官网文件明示该会统一监管民间与公共部门并执行本法；本次未逐个打开 PPC 命令或劝告个案页核，个案标待核。PPC documents state that the Commission supervises both the private and public sectors uniformly and enforces the Act. This round did not open the PPC's individual order or recommendation case pages one by one; the cases are marked pending.

待核Pending

PPC 法令页已挂出更晚施行版本的对照表，本法仍在滚动修订，引用条文须注明所据版本日期。The PPC's legislation page already carries comparison tables for versions with later effective dates; the Act is still under rolling amendment, and citations must state the version date relied on.

已出台Promulgated

2018 年 8 月 14 日签署，公布于 2018 年 8 月 15 日官方公报 DOU 并于同日增刊部分重刊。Lei nº 13.853, de 2019 已把短标题定为 Lei Geral de Proteção de Dados Pessoais (LGPD) 并设数据保护局 ANPD。Signed on August 14, 2018, published in the official gazette (DOU) on August 15, 2018 and partly republished in an extra edition the same day. Lei nº 13.853, de 2019 set the short title as Lei Geral de Proteção de Dados Pessoais (LGPD) and created the data protection authority, the ANPD.

已生效In force

分段生效，以汇编本 Article 65 为准逐个列：第 I 项，ANPD 相关条文（Articles 55-A 至 55-L、58-A、58-B）自 2018 年 12 月 28 日生效；第 I-A 项（由 Lei nº 14.010, de 2020 加入），制裁条文 Articles 52、53、54 自 2021 年 8 月 1 日生效；第 II 项，其余条文为公布后 24 个月生效。In force in stages, listed one by one from Article 65 of the consolidated text: item I, the ANPD provisions (Articles 55-A to 55-L, 58-A and 58-B) took effect on December 28, 2018; item I-A (added by Lei nº 14.010, de 2020), the sanctions provisions, Articles 52, 53 and 54, took effect on August 1, 2021; item II, the remaining provisions took effect 24 months after publication.

执法已动Enforcement

有机制且机构已设。Article 55-A 设 Autoridade Nacional de Proteção de Dados (ANPD)；Article 52 定简单罚款为巴西境内营业额 2%，每项违规上限 5000 万雷亚尔，另有警告、封存与删除数据等制裁。The mechanism exists and the authority is established. Article 55-A creates the Autoridade Nacional de Proteção de Dados (ANPD); Article 52 sets the simple fine at 2% of revenue in Brazil, capped at BRL 50 million per violation, alongside warnings and the blocking and deletion of data among other sanctions.

待核Pending

其余条文的实际操作生效日（2020 年 9 月 18 日一说）未能仅凭汇编本 Article 65 干净读出，汇编本同页并列了 Medida Provisória nº 959, de 2020 曾改写第 II 项的版本，该日后经 Lei nº 14.010, de 2020 落定的口径须再以 DOU 最终文本逐字复核，本项暂记待核，不把 2020 年 9 月 18 日写成已核定论。另注：Planalto 原页本次直开遭拦截，条文系经 gov.br 官方汇编 PDF 逐条核读，原页链接仍列 Planalto。The operative effective date of the remaining provisions (one account says September 18, 2020) cannot be read cleanly from Article 65 of the consolidated text alone: the same page carries, side by side, the version of item II once rewritten by Medida Provisória nº 959, de 2020, and the reading finally settled by Lei nº 14.010, de 2020 must be re-verified word by word against the final DOU text. This point is recorded as pending, and September 18, 2020 is not written as a verified conclusion. Note also: the Planalto original page was blocked when opened directly in this round; the provisions were read and checked article by article from the official gov.br consolidated PDF, while the source link still points to Planalto.

已出台Promulgated

2023 年 8 月 11 日获总统同意并刊于印度官方公报 The Gazette of India, Extraordinary, Part II, Section 1, No. 25，公报号 CG-DL-E-12082023-248045。Received the President's assent on August 11, 2023 and was published in The Gazette of India, Extraordinary, Part II, Section 1, No. 25, gazette no. CG-DL-E-12082023-248045.

已生效In force

法案本身未定统一生效日。Section 1(2) 原文定由中央政府以官方公报通知指定生效日，不同条文可定不同日期。其后 MeitY 以 G. 843(E)（通知日 2025 年 11 月 13 日，公报原件已开核）分三段指定：第一段公布日即生效，含 Section 1(2)、Section 2、Sections 18 至 26（Data Protection Board 设立）、Sections 35、38 至 43、Section 44(1) 与 (3)；第二段公布后一年生效，即 Section 6(9) 与 Section 27(1)(d)；第三段公布后十八个月生效，含 Sections 3 至 5、Section 6(1) 至 (8) 与 (10)、Sections 7 至 17、Section 27 除 (1)(d) 外、Sections 28 至 34、Sections 36、37 与 Section 44(2)，即数据受托人核心义务与罚则程序所在段。The Act itself sets no single commencement date. Section 1(2) provides that the Central Government designates the commencement date by notification in the Official Gazette, and different dates may be set for different provisions. MeitY then designated three tranches by G. 843(E) (notification dated November 13, 2025; the gazette original was opened and checked): the first tranche took effect on the day of publication, covering Section 1(2), Section 2, Sections 18 to 26 (establishing the Data Protection Board), Sections 35 and 38 to 43, and Section 44(1) and (3); the second tranche takes effect one year after publication, covering Section 6(9) and Section 27(1)(d); the third tranche takes effect eighteen months after publication, covering Sections 3 to 5, Section 6(1) to (8) and (10), Sections 7 to 17, Section 27 except (1)(d), Sections 28 to 34, Sections 36 and 37, and Section 44(2), the tranche carrying the data fiduciaries' core obligations and the penalty procedures.

执法已动Enforcement

尚属机构设立阶段，核心执法未动。Board 相关条文已生效，但主体义务与罚则条文在第三段才生效，该段到期前不能写成全面执法已动。Still at the institution-building stage; core enforcement has not moved. The Board provisions are in force, but the substantive duties and the penalty provisions take effect only in the third tranche; before that tranche falls due, this must not be written as full enforcement in motion.

待核Pending

一年段与十八个月段的具体日历日待核。G. 843(E) 原件只写公布后一年与公布后十八个月，公报刊期日为 2025 年 11 月 13 日而公报文件号含 14112025，二级汇总因此有数到 2027 年 5 月 13 日与 2027 年 5 月 14 日两说，须以 MeitY 对公布日的正式口径确认后才可写死。法案附表各项罚金上限本次未在 MeitY 法案原文页逐项核到，不报具体金额。The exact calendar dates of the one-year and eighteen-month tranches are pending. The G. 843(E) original states only one year and eighteen months after publication; the gazette issue date is November 13, 2025 while the gazette document number contains 14112025, so secondary summaries count to both May 13, 2027 and May 14, 2027. The dates can only be fixed once MeitY's official reading of the publication date is confirmed. The penalty ceilings in the Act's Schedule were not verified item by item on MeitY's Act page in this round, and no figures are reported.

已出台Promulgated

2022 年 7 月 7 日公布。令文载明已经 2022 年 5 月 19 日国家互联网信息办公室 2022 年第 10 次室务会议审议通过，令文落款 2022 年 7 月 7 日。Published on July 7, 2022. The order records that the Measures were deliberated and adopted at the Cyberspace Administration of China's 10th office meeting of 2022, on May 19, 2022, and the order is dated July 7, 2022.

已生效In force

2022 年 9 月 1 日起施行，见令文及第二十条。第二十条另规定施行前已开展的不符合规定的数据出境活动，应当自施行之日起 6 个月内完成整改。In force from September 1, 2022, per the order and Article 20. Article 20 further provides that data export activities already under way before implementation that do not conform must be rectified within six months of the implementation date.

执法已动Enforcement

有。国家网信办 2026 年 3 月 23 日官方回顾称，已组织开展重点企业机构数据出境管理专项检查，对违法违规问题依法依规进行处置处罚，并已发布申报指南第三版与数据出境申报系统，评估申报在实际运行。Yes. The Cyberspace Administration of China's official review of March 23, 2026 states that it has organised special inspections of data export management at key enterprises and institutions, handled and penalised violations in accordance with law and regulation, and has issued the third edition of the filing guide and the data export filing system; assessment filings are operating in practice.

待核Pending

本办法原文自身无待核日期项；但第四条原始阈值已被 R-17 调整，现行适用口径以 R-17 为准，不得只引本办法原文判断是否需申报。The Measures themselves carry no pending date item; but the original Article 4 thresholds have been adjusted by R-17, and the currently applicable reading follows R-17. Whether a filing is required must not be judged from these Measures alone.

已出台Promulgated

公布日有两种表述并存，令文落款为 2023 年 2 月 22 日，R-17 第十三条亦称其为 2023 年 2 月 22 日公布；中国网信网该页刊载时间为 2023 年 2 月 24 日，公布稿同日称 2 月 24 日公布。引用时应注明口径。令文载明已经 2023 年 2 月 3 日国家互联网信息办公室 2023 年第 2 次室务会议审议通过。Two datings of publication coexist: the order is dated February 22, 2023, and Article 13 of R-17 also calls it published on February 22, 2023; the CAC website page carries a posting time of February 24, 2023, and the promulgation release of the same day calls it published on February 24. Citations should state which dating is used. The order records deliberation and adoption at the Administration's 2nd office meeting of 2023, on February 3, 2023.

已生效In force

2023 年 6 月 1 日起施行，见令文及第十三条。第十三条另规定施行前已开展的不符合规定的个人信息出境活动，应当自施行之日起 6 个月内完成整改。In force from June 1, 2023, per the order and Article 13. Article 13 further provides that personal information export activities already under way that do not conform must be rectified within six months of the implementation date.

执法已动Enforcement

有。国家网信办官方回顾称各地已开展个人信息出境标准合同备案工作，广东已编制发布粤港澳大湾区个人信息跨境流动标准合同备案指南，国家网信办已开通数据出境申报系统受理备案，并对数据出境违法违规问题开展专项检查与处置处罚。Yes. The CAC's official review states that localities have carried out standard-contract filing work for personal information export; that Guangdong has compiled and issued a filing guide for the Guangdong to Hong Kong to Macao Greater Bay Area standard contract for cross-border personal information flows; that the CAC has opened the data export filing system to accept filings; and that special inspections, handling and penalties for data export violations have been carried out.

待核Pending

公布日双口径如上，分开记。本办法第四条原始适用阈值已被 R-17 调整，现行判断以 R-17 第五条、第七条、第八条为准。The two publication datings above are recorded separately. The original Article 4 applicability thresholds of these Measures have been adjusted by R-17; current determinations follow Articles 5, 7 and 8 of R-17.

已出台Promulgated

2024 年 3 月 22 日公布。令文载明已经 2023 年 11 月 28 日国家互联网信息办公室 2023 年第 26 次室务会议审议通过，令文落款 2024 年 3 月 22 日。Published on March 22, 2024. The order records deliberation and adoption at the Administration's 26th office meeting of 2023, on November 28, 2023, and the order is dated March 22, 2024.

已生效In force

自公布之日起施行，见令文及第十四条，即 2024 年 3 月 22 日起施行。In force from the date of publication, per the order and Article 14, that is, from March 22, 2024.

执法已动Enforcement

有。国家网信办官方回顾直接以本规定实施两周年为题，称其出台实施以来已放宽数据跨境流动条件、收窄数据出境安全评估范围，并已落地自贸试验区负面清单、预评估试点与专项检查处置。Yes. The CAC's official review, written for the second anniversary of these Provisions, states that since their issue and implementation the conditions for cross-border data flows have been relaxed and the scope of data export security assessment narrowed, and that pilot free trade zone negative lists, pre-assessment pilots and special-inspection handling have been put in place.

待核Pending

第十三条规定，R-15 与 R-16 等相关规定与本规定不一致的，适用本规定，故前两项的现行阈值与有效期必须按本规定改读，无需待核。自由贸易试验区负面清单为各区分别制定与备案，具体清单内容不在本规定原文内，属逐区待核。Article 13 provides that where R-15, R-16 and other related provisions are inconsistent with these Provisions, these Provisions apply; the current thresholds and validity periods of the two earlier instruments must therefore be re-read under this one, and nothing there needs to stay pending. The pilot free trade zone negative lists are drawn up and filed zone by zone; their specific contents are not in the text of these Provisions and are pending zone by zone.

已出台Promulgated

2020 年 10 月 17 日通过并公布。主席令载明已由第十三届全国人民代表大会常务委员会第二十二次会议于 2020 年 10 月 17 日通过，现予公布。Adopted and promulgated on October 17, 2020. The Presidential Order records that the Law was adopted at the 22nd session of the Standing Committee of the 13th National People's Congress on October 17, 2020, and is promulgated.

已生效In force

2020 年 12 月 1 日起施行，见主席令及第四十九条。In force from December 1, 2020, per the Presidential Order and Article 49.

执法已动Enforcement

有。商务部等部门依据该法及《中华人民共和国两用物项出口管制条例》发布 2024 年第 51 号公告，公布《中华人民共和国两用物项出口管制清单》自 2024 年 12 月 1 日起实施，许可管理已按清单运行。Yes. The Ministry of Commerce and other departments, acting under this Law and the Regulations on Export Control of Dual-Use Items, issued Announcement No. 51 of 2024, publishing the Dual-Use Items Export Control List of the People's Republic of China, implemented from December 1, 2024; licensing administration now runs by the list.

待核Pending

本法原文未点名人工智能。两用物项清单与 AI 的具体对应关系，官方答记者问只说明清单按 10 大行业领域、5 种物项类型系统整合现行已管制两用物项，数量约 700 项左右，未在该官方文本中核到以人工智能命名的条目。具体某项 AI 技术、软件或设备是否列管，须逐项查清单原文编码与参数，本条目标待核，不作推断。The Law's text does not name artificial intelligence. On the correspondence between the dual-use list and AI, the official press briefing states only that the list systematically consolidates currently controlled dual-use items across ten major industry fields and five item types, totalling roughly 700 items; no entry named for artificial intelligence was found in that official text. Whether a specific AI technology, software or equipment is listed must be checked item by item against the list's codes and parameters. This correspondence is marked pending, and no inference is drawn.

已出台Promulgated

令文称已经 2023 年 5 月 23 日国家网信办 2023 年第 12 次室务会会议审议通过并经其余六部门同意。公布日双口径分开记：令落款为 2023 年 7 月 10 日，网信办官网于 2023 年 7 月 13 日刊发全文与发布新闻，引用时须注明采用哪一口径。The order records deliberation and adoption at the CAC's 12th office meeting of 2023, on May 23, 2023, with the agreement of the other six departments. The two publication datings are kept apart: the order is dated July 10, 2023, and the CAC website published the full text and the release news on July 13, 2023; citations must state which dating is used.

已生效In force

原文第二十四条及令文均载，自 2023 年 8 月 15 日起施行。Article 24 of the text and the order both state effect from August 15, 2023.

执法已动Enforcement

有。网信部门按本办法持续开展生成式人工智能服务备案工作并发布已备案信息公告，官方公告称截至 2025 年 12 月 31 日累计 748 款生成式人工智能服务完成备案，435 款应用或功能完成登记。此处之备案为本办法项下的管理运行口径，其与 EXP-002 中生成式 AI 服务备案的对应关系以 EXP 条目内记述为准。Yes. The cyberspace authorities continuously carry out generative AI service filing work under these Measures and publish notices of filed services; an official notice states that, as of December 31, 2025, a cumulative 748 generative AI services had completed filing and 435 applications or functions had completed registration. The filing here is the administrative operation under these Measures; its correspondence to the generative AI service filing in EXP-002 follows the record inside the EXP entry.

待核Pending

无日期待核；公布日双口径已分开记。No date is pending; the two publication datings are recorded separately.

已出台Promulgated

令文称已经 2021 年 11 月 16 日国家网信办 2021 年第 20 次室务会议审议通过并经其余三部门同意。公布日双口径分开记：令落款为 2021 年 12 月 31 日，网信办官网于 2022 年 1 月 4 日刊发全文与发布新闻。The order records deliberation and adoption at the CAC's 20th office meeting of 2021, on November 16, 2021, with the agreement of the other three departments. The two publication datings are kept apart: the order is dated December 31, 2021, and the CAC website published the full text and the release news on January 4, 2022.

已生效In force

原文第三十五条载，自 2022 年 3 月 1 日起施行。Article 35 of the text states effect from March 1, 2022.

执法已动Enforcement

有。原文第二十五条规定网信部门对材料齐全的备案予以备案、发放备案编号并进行公示，此后算法备案信息通过互联网信息服务算法备案系统持续公示，深度合成等专项备案批次亦援引本规定办理。Yes. Article 25 provides that the cyberspace authority files complete submissions, issues a filing number and makes the filing public; since then, algorithm filing information has been continuously published through the Internet Information Service Algorithm Filing System, and special filing batches such as deep synthesis are also handled under these Provisions.

待核Pending

无日期待核；公布日双口径已分开记。No date is pending; the two publication datings are recorded separately.

已出台Promulgated

令文称已经 2022 年 11 月 3 日国家网信办 2022 年第 21 次室务会议审议通过并经工业和信息化部、公安部同意。公布日双口径分开记：令落款为 2022 年 11 月 25 日，网信办官网于 2022 年 12 月 11 日刊发全文与发布新闻。The order records deliberation and adoption at the CAC's 21st office meeting of 2022, on November 3, 2022, with the agreement of the Ministry of Industry and Information Technology and the Ministry of Public Security. The two publication datings are kept apart: the order is dated November 25, 2022, and the CAC website published the full text and the release news on December 11, 2022.

已生效In force

原文第二十五条载，自 2023 年 1 月 10 日起施行。Article 25 of the text states effect from January 10, 2023.

执法已动Enforcement

有。国家网信办已按本规定持续公开发布境内深度合成服务算法备案信息，官网可见第十八批、第十九批等批次公告，并提示未备案者尽快申请备案。Yes. The CAC has continuously published domestic deep synthesis service algorithm filing information under these Provisions; its website carries batch notices such as the eighteenth and nineteenth batches, and reminds those not yet filed to apply for filing as soon as possible.

待核Pending

无日期待核；公布日双口径已分开记。No date is pending; the two publication datings are recorded separately.

已出台Promulgated

印发日与发布日分开记：通知落款为 2025 年 3 月 7 日，网信办官网于 2025 年 3 月 14 日刊发通知全文，同日刊发四部门联合发布新闻。配套国标经国家标准平台载，发布日期 2025 年 2 月 28 日。The issuance date and the publication date are recorded separately: the notice is dated March 7, 2025, and the CAC website published the full notice on March 14, 2025, publishing the four departments' joint release news the same day. The accompanying national standard, as recorded on the national standards platform, was published on February 28, 2025.

已生效In force

原文第十四条载，自 2025 年 9 月 1 日起施行；配套国标实施日期同为 2025 年 9 月 1 日，与本办法同步实施。Article 14 of the text states effect from September 1, 2025; the accompanying national standard's implementation date is likewise September 1, 2025, implemented in step with these Measures.

执法已动Enforcement

有。网信办官网 2025 年 11 月 25 日通报，网信部门依法集中查处一批存在人工智能生成合成内容标识违法违规问题的移动互联网应用程序，处置包括约谈、责令限期改正、下架下线。Yes. A CAC notice of November 25, 2025 records that the cyberspace authorities, acting in accordance with law, dealt in a concentrated action with a batch of mobile internet applications with labeling violations for AI-generated and synthesized content; the measures taken included regulatory interviews, orders to rectify within a time limit, and takedown and removal.

待核Pending

无日期待核；印发日与发布日已分开记。No date is pending; the issuance and publication dates are recorded separately.

已出台Promulgated

原法 2016 年 11 月 7 日第十二届全国人民代表大会常务委员会第二十四次会议通过（2025 年修正版全文页眉载）。The original Law was adopted on November 7, 2016 at the 24th session of the Standing Committee of the 12th National People's Congress (as carried in the header of the full text of the 2025 amended version).

已生效In force

原法自 2017 年 6 月 1 日起施行（修正版全文第八十一条仍载）。2025 年修正单独记：第十四届全国人民代表大会常务委员会第十八次会议于 2025 年 10 月 28 日通过《关于修改〈中华人民共和国网络安全法〉的决定》，决定原文末句载本决定自 2026 年 1 月 1 日起施行，法律根据本决定作相应修改并对条文顺序作相应调整、重新公布。截至本条核查日修正决定已生效，与原法 2017 年施行日不冲突，两者分开记。修正新增第二十条涉及人工智能，原文为国家支持人工智能基础理论研究和算法等关键技术研发、完善伦理规范、加强风险监测评估和安全监管。The original Law has been in force since June 1, 2017 (Article 81 of the amended text still so states). The 2025 amendment is recorded separately: on October 28, 2025, the 18th session of the Standing Committee of the 14th National People's Congress adopted the Decision on Amending the Cybersecurity Law of the People's Republic of China; the Decision's final sentence states that it takes effect on January 1, 2026, and that the Law is correspondingly amended, its article order correspondingly adjusted, and the Law republished. As of this entry's check date the amendment Decision is in effect; it does not conflict with the original Law's 2017 implementation date, and the two are recorded separately. The amendment's new Article 20 concerns artificial intelligence, providing in the original text that the state supports basic theoretical research on AI and research and development of key technologies such as algorithms, improves ethical norms, and strengthens risk monitoring, assessment and security regulation.

执法已动Enforcement

有制度性执法安排。修正版全文设法律责任专章并提高部分罚款幅度，网信、电信、公安等部门依职责负责监督管理。具体单项执法个案通报未在本轮单独核，列入待核清单。There is an institutional enforcement arrangement: the amended text carries a dedicated legal-liability chapter and raises some fine levels, and the cyberspace, telecommunications, public security and other departments supervise and administer within their respective remits. Individual enforcement case notices were not separately checked this round and are placed on the pending list.

待核Pending

无日期待核；仅具体执法个案未另核，不影响通过与施行日期的认定。No date is pending; only the individual enforcement cases were not separately checked, which does not affect the findings on adoption and implementation dates.

已出台Promulgated

2021 年 6 月 10 日第十三届全国人民代表大会常务委员会第二十九次会议通过，现予公布（中国人大网全文页与主席令第八十四号载）。Adopted on June 10, 2021 at the 29th session of the Standing Committee of the 13th National People's Congress, and promulgated (as carried on the NPC website's full-text page and in Presidential Order No. 84).

已生效In force

原文第五十五条载，本法自 2021 年 9 月 1 日起施行。Article 55 of the text states that this Law takes effect on September 1, 2021.

执法已动Enforcement

有制度性执法安排。原文设数据安全审查、风险评估、约谈整改与法律责任，重要数据出境与向境外提供重要数据设有专门罚则。具体单项执法个案通报未在本轮单独核，列入待核清单。There is an institutional enforcement arrangement: the text sets up data security review, risk assessment, regulatory interviews and rectification, and legal liability, with dedicated penalties for important-data export and for providing important data abroad. Individual enforcement case notices were not separately checked this round and are placed on the pending list.

待核Pending

通过、公布、施行日期无待核；仅具体执法个案未另核。The adoption, promulgation and implementation dates carry nothing pending; only the individual enforcement cases were not separately checked.

已出台Promulgated

2021 年 8 月 20 日第十三届全国人民代表大会常务委员会第三十次会议通过（中国人大网全文载）。Adopted on August 20, 2021 at the 30th session of the Standing Committee of the 13th National People's Congress (as carried in the NPC website's full text).

已生效In force

原文第七十四条载，本法自 2021 年 11 月 1 日起施行。Article 74 of the text states that this Law takes effect on November 1, 2021.

执法已动Enforcement

有制度性执法安排。原文设履行个人信息保护职责的部门、合规审计、个人信息保护影响评估与法律责任专章，情节严重可处五千万元以下或者上一年度营业额百分之五以下罚款。具体单项执法个案通报未在本轮单独核，列入待核清单。There is an institutional enforcement arrangement: the text establishes the departments that perform personal information protection duties, compliance audits, personal information protection impact assessments and a dedicated legal-liability chapter, under which serious cases can be fined up to RMB 50 million or up to 5% of the previous year's turnover. Individual enforcement case notices were not separately checked this round and are placed on the pending list.

待核Pending

通过、施行日期无待核；仅具体执法个案未另核。The adoption and implementation dates carry nothing pending; only the individual enforcement cases were not separately checked.