added
New Article 3
此前规则
No equivalent standalone provision.
当前规则
Adds an express national cybersecurity policy provision.
实际影响：Places the law within the current national cybersecurity policy framework.
Added by item 1 of the amendment decision.
中文研究版
2016 年《网络安全法》与 2025 年修正比较
2025 Cybersecurity Law amendments take effect
逐项梳理责任、执法和法律衔接条款的修正，并保留官方版本来源。
What changed
重要变化概览
逐项梳理责任、执法和法律衔接条款的修正，并保留官方版本来源。
- New provisions address national cybersecurity policy and artificial-intelligence development and security.
- Personal-information handling is expressly linked to the PIPL, Civil Code, and other laws and administrative regulations.
- Liability provisions are reorganized with higher penalties for serious consequences and new mitigation language.
modified
Former Article 18 / new Article 20
此前规则
Former Article 18 included a second paragraph that was removed.
当前规则
Adds support for AI research, infrastructure, ethics, risk monitoring, security supervision, and AI-enabled cybersecurity management.
实际影响：Expressly brings AI development and safety into the Cybersecurity Law framework.
Items 2 and 3 of the amendment decision.
clarified
Former Article 40 / new Article 42
此前规则
The article addressed protection of user information collected by network operators.
当前规则
Adds an express requirement to comply with the Cybersecurity Law, Civil Code, PIPL, and other laws and administrative regulations when processing personal information.
实际影响：Clarifies coordination with the later personal-information legal framework.
Item 4 of the amendment decision.
modified
New Article 61
此前规则
Former Article 59 contained the earlier penalty structure for specified security-protection failures.
当前规则
Introduces differentiated penalties and higher bands where failures cause serious or particularly serious cybersecurity consequences.
实际影响：Raises consequence-based exposure for network operators and critical information infrastructure operators, including responsible personnel.
Item 5 of the amendment decision; consult the official text for exact penalty ranges.
added
New Article 63
此前规则
No equivalent standalone liability article for selling or providing specified uncertified or non-compliant products.
当前规则
Adds liability for selling or providing network critical equipment and specialized cybersecurity products that do not meet certification or testing requirements.
实际影响：Creates a dedicated enforcement basis for this product-control requirement.
Item 7 of the amendment decision.
modified
New Articles 64–69
此前规则
Former liability articles used the earlier numbering and penalty structure.
当前规则
Reorders and revises liability for prohibited activities, review obligations, CII procurement, and prohibited-information handling.
实际影响：Requires compliance mappings and citations to use the amended numbering and penalty provisions.
Items 8–11 of the amendment decision.
procedural
New Article 71
此前规则
Personal-information and cross-border liabilities were distributed across former Articles 64, 66, and 70.
当前规则
Consolidates coordination with other laws and administrative regulations for prohibited content, personal-information rights, and CII cross-border storage or transfer conduct.
实际影响：Directs readers to the relevant specialized legal regime for handling and penalties.
Item 12 of the amendment decision.
added
New Article 73
此前规则
No equivalent express cross-reference in the law.
当前规则
Adds an express cross-reference to lighter, mitigated, or no punishment under the Administrative Penalty Law.
实际影响：Makes general administrative-penalty mitigation principles explicit within the law.
Item 13 of the amendment decision.
modified
Former Article 75 / new Article 77
此前规则
The earlier extraterritorial provision addressed attacks, intrusion, interference, destruction, or other activities causing serious consequences.
当前规则
Uses broader language covering activities by overseas institutions, organizations, or individuals that endanger PRC cybersecurity and retains possible sanctions for serious consequences.
实际影响：Broadens the wording of the extraterritorial conduct provision.
Item 14 of the amendment decision.