China Implements New Cyber Incident Reporting Regulations
Summary
Hide ▲
Show ▼
Starting November 1, 2025, China will enforce a new cyber incident reporting regulation requiring network operators to report critical incidents within one hour. The regulations apply to network operators in China and its territories, with varying reporting times based on the severity of the incident. The new rules are part of China's effort to strengthen its cybersecurity infrastructure following recent cyber-espionage campaigns by Chinese-linked threat groups. The regulations also include penalties for non-compliance and concealment of incidents.
Timeline
-
01.10.2025 04:00 1 articles · 1h ago
China Implements One-Hour Reporting Rule for Critical Cyber Incidents
Starting November 1, 2025, China will enforce a new regulation requiring network operators to report critical cyber incidents within one hour. The regulations apply to network operators in China and its territories, with varying reporting times based on the severity of the incident. The new rules are part of China's effort to strengthen its cybersecurity infrastructure following recent cyber-espionage campaigns by Chinese-linked threat groups. The regulations also include penalties for non-compliance and concealment of incidents.
Show sources
- China Imposes One-Hour Reporting Rule for Major Cyber Incidents — www.darkreading.com — 01.10.2025 04:00
Information Snippets
-
Network operators in China must report critical incidents within one hour starting November 1, 2025.
First reported: 01.10.2025 04:001 source, 1 articleShow sources
- China Imposes One-Hour Reporting Rule for Major Cyber Incidents — www.darkreading.com — 01.10.2025 04:00
-
The regulations apply to network operators building, operating, or providing services in China and its territories.
First reported: 01.10.2025 04:001 source, 1 articleShow sources
- China Imposes One-Hour Reporting Rule for Major Cyber Incidents — www.darkreading.com — 01.10.2025 04:00
-
Incidents affecting key infrastructure must be reported within 30 minutes.
First reported: 01.10.2025 04:001 source, 1 articleShow sources
- China Imposes One-Hour Reporting Rule for Major Cyber Incidents — www.darkreading.com — 01.10.2025 04:00
-
Non-critical incidents have reporting times ranging from two to four hours.
First reported: 01.10.2025 04:001 source, 1 articleShow sources
- China Imposes One-Hour Reporting Rule for Major Cyber Incidents — www.darkreading.com — 01.10.2025 04:00
-
Penalties include legal action for non-compliance and concealment of incidents.
First reported: 01.10.2025 04:001 source, 1 articleShow sources
- China Imposes One-Hour Reporting Rule for Major Cyber Incidents — www.darkreading.com — 01.10.2025 04:00
-
The regulations are part of China's response to recent cyber-espionage campaigns.
First reported: 01.10.2025 04:001 source, 1 articleShow sources
- China Imposes One-Hour Reporting Rule for Major Cyber Incidents — www.darkreading.com — 01.10.2025 04:00
-
China-linked threat groups have been active in recent attacks, including the Salt Typhoon group.
First reported: 01.10.2025 04:001 source, 1 articleShow sources
- China Imposes One-Hour Reporting Rule for Major Cyber Incidents — www.darkreading.com — 01.10.2025 04:00
-
The new regulations aim to enhance cybersecurity and national security.
First reported: 01.10.2025 04:001 source, 1 articleShow sources
- China Imposes One-Hour Reporting Rule for Major Cyber Incidents — www.darkreading.com — 01.10.2025 04:00