Skip to content

China Small PI Handler Simplified Measures

In force China · In force Sep 1, 2026 · no upcoming deadlines

Deadlines

DateWhat happens
Sep 1, 20263 weeks agoSimplified measures for small handlers take effect

Summaries for reference, not legal advice. Check the official text.

What it does

Eases PIPL compliance for handlers processing personal information of fewer than 100,000 people. They can use short notices, rely on platform privacy rules, run simplified compliance audits at least every five years using a self-check form, and use simplified impact assessments. It also exempts common cross-border transfers from the assessment, contract and certification routes and limits penalties for minor first violations.

Who it applies to
Personal information handlers in China that process personal information of fewer than 100,000 individuals.
Penalties
No penalty for minor, promptly corrected violations without harm; lighter penalties for self-reporting and cooperation. Repeated violations or incidents are handled under the PIPL and Network Data Security Regulations.
Enforced by
CAC and Ministry of Public Security
Official name
Provisions on Simplified Personal Information Protection Measures for Small Personal Information Handlers
Citation
CAC and MPS Order No. 25
Topics
privacy, data-residency
Verified 2026-09-25
Research notes

Adopted 2026-06-26, signed 2026-07-22, published 2026-07-24. Special rules still apply to children under 14 and to sensitive personal information.

Related

Questions about China Small PI Handler Simplified Measures
What are the China Small PI Handler Simplified Measures compliance deadlines?
Sep 1, 2026: Simplified measures for small handlers take effect.
When does China Small PI Handler Simplified Measures take effect?
China Small PI Handler Simplified Measures took effect on Sep 1, 2026.
Who does China Small PI Handler Simplified Measures apply to?
Personal information handlers in China that process personal information of fewer than 100,000 individuals.
What are the penalties under China Small PI Handler Simplified Measures?
No penalty for minor, promptly corrected violations without harm; lighter penalties for self-reporting and cooperation. Repeated violations or incidents are handled under the PIPL and Network Data Security Regulations.

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.