Skip to content

China Facial Recognition Measures

In force China · In force Jun 1, 2025 · no upcoming deadlines

Deadlines

DateWhat happens
Jun 1, 20251 year agoFacial recognition measures take effect

Summaries for reference, not legal advice. Check the official text.

What it does

Sets rules for using facial recognition to process face data in China. Handlers need a specific purpose and necessity, separate consent (guardian consent under 14), a prior impact assessment, local storage on the device unless consent or law allows otherwise, and a non-face alternative. Handlers storing face data of 100,000 people or more must file with the provincial CAC within 30 working days.

Who it applies to
Personal information handlers using facial recognition technology in China. Pure R&D and algorithm training are excluded.
Penalties
Handled under the PIPL and other laws; PIPL fines reach RMB 50 million or 5% of prior-year turnover for serious violations.
Enforced by
CAC and Ministry of Public Security
Official name
Measures for the Security Management of Facial Recognition Technology Applications
Citation
CAC and MPS Order No. 19
Topics
biometrics, privacy
Verified 2026-09-25 gov.cn
Research notes

Adopted by CAC on 2024-09-30, signed 2025-03-13, published 2025-03-21. Face recognition devices may not be installed in private spaces such as hotel rooms and changing rooms.

Related

Questions about China Facial Recognition Measures
What are the China Facial Recognition Measures compliance deadlines?
Jun 1, 2025: Facial recognition measures take effect.
When does China Facial Recognition Measures take effect?
China Facial Recognition Measures took effect on Jun 1, 2025.
Who does China Facial Recognition Measures apply to?
Personal information handlers using facial recognition technology in China. Pure R&D and algorithm training are excluded.
What are the penalties under China Facial Recognition Measures?
Handled under the PIPL and other laws; PIPL fines reach RMB 50 million or 5% of prior-year turnover for serious violations.

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.