Cybersecurity Law of the PRC takes effect
On 1 June 2017 the Cybersecurity Law of the People’s Republic of China took effect after the NPC Standing Committee adopted it on 7 November 2016. In the causal graph this event weakens the driver Personal-Data Protection.
Read the full account
On 1 June 2017 the Cybersecurity Law of the People’s Republic of China took effect after the NPC Standing Committee adopted it on 7 November 2016. It requires network operators to store selected data in China and to assist public-security and national-security organs.
Context
The Cyberspace Administration of China implements. Xi had created the Central Cyberspace Affairs Commission. He did not write every implementing standard. Real-name and data-localisation rules followed.
The 2017 National Intelligence Law and 2021 Personal Information Protection Law are neighbouring later or same-year instruments.
The General Secretary of the Chinese Communist Party, concurrently President of the People’s Republic of China and Chairman of the Central Military Commission, can set the Politburo agenda, nominate the State Council leadership, and command the armed forces. He does not write UN General Assembly resolutions, OHCHR assessments, WHO emergency-use listings, or Hong Kong ordinances by himself.
Why it matters
The path is digital rights and personal-data protection: a completed localisation-and-assistance statute raises expected state access to network data.
Who was responsible
Contribution type and responsibility level for each recorded actor — not sole-author shorthand.
Xi Jinping
PersonDirect responsibility
responsibility level 0.65 · verified
The NPC Standing Committee enacted the law under a Party leadership he chairs. CAC implements. Operators store data.
What changed
Fact → Driver → Indicator. Relationship strength orders the paths; it is not the observed indicator movement.
- FactCybersecurity Law of the PRC takes effect
- weakensDriverPersonal-Data Protection
impact weight 0.5 · Effect from 1 June 2017 · verified
Mandatory assistance to security organs reduces expected private control of personal data relative to a narrower statute.
- FactCybersecurity Law of the PRC takes effect
- strengthensDriverDigital-Rights and Platform-Power Regulation
- strengthensIndicators (4)Alternative sources of information index
impact weight 0.6 · Effect from 1 June 2017 · verified
A completed cybersecurity statute with localisation and assistance duties increases expected state control of networks.
Strengthens · Relationship strength 0.31 (weight 0.6 × strength 0.52)
Observed
0.62 score from 0 to 1 · 0.23 below the normal line (2024)
Worse than normal125 readings, 1900–2024: rose from 0.35 score from 0 to 1 to 0.62 score from 0 to 1.
Above normal = better
Weakens · Relationship strength 0.27 (weight 0.6 × strength 0.45)
Observed
45 Score · 45 above the normal line (2024)
Worse than normal7 readings, 2018–2024: rose from 43.8 Score to 45 Score.
Normal is zero · any amount = worse
Strengthens · Relationship strength 0.24 (weight 0.6 × strength 0.4)
Above normal = better
All indicators on this path (4)
Strengthens · Relationship strength 0.21 (weight 0.6 × strength 0.35)
Observed
0.55 index score (0-1) · 0.26 below the normal line (2024)
Worse than normalAbove normal = better
Evidence
The sources behind this fact and its verification state.
- 1.Reuters — China passes cybersecurity lawReuters · High credibility · verified
- 2.State Council — China adopts Cybersecurity Law, November 2016State Council of the PRC · High credibility · verified
What the sources establish
State Council of the PRC carries the official instrument or communique. Reuters records the same dated act independently.
Established: a 1 June 2017 commencement of the Cybersecurity Law after a 7 November 2016 NPC Standing Committee adoption.
Not established: a unique later censorship coefficient from commencement day, or that Xi wrote every CAC standard.
CAC implements. Operators store data.. A later repeal, court stay, or successor order would be a different Fact with a different date. That pair identifies Cybersecurity Law of the PRC takes effect, not a later speech about Cybersecurity Law of the PRC takes effect.
Co-authors and later implementers named in Context remain on the file. If a later repeal, stay, or successor decree exists, it needs its own date and its own row. The contribution described on this Person row is limited to The NPC Standing Committee enacted the law under a Party leadership he chairs. CAC implements. Operators store data. That limit is the alternative to treating office-holding as authorship of every later series. The National People’s Congress, the State Council, provincial governments, the People’s Liberation Army, Hong Kong’s executive, and foreign counterparties share specific files. Allegation is not a completed judgment. An OHCHR assessment is not a criminal conviction. A white paper is not a census. A UN pledge is not a delivered emissions path.
Causal path
How this event connects to drivers and indicators in the graph.
- ActorXi Jinping
- contributed toFactCybersecurity Law of the PRC takes effect
- weakensDrivers (2)Personal-Data Protection
Cite this page
Factrail. (2026). Cybersecurity Law of the PRC takes effect. Factrail. https://factrail.ai/facts/cn-cybersecurity-law-2017
https://factrail.ai/facts/cn-cybersecurity-law-2017
Accessed 15 October 2026.
By the Factrail desk · Method: how we source and score · Last reviewed
Dispute this factNamed here, or represent someone who is? Request a right of reply.