# Cybersecurity Law of the PRC takes effect

Date: 2017

## The fact

On 1 June 2017 the Cybersecurity Law of the People’s Republic of China took effect after the NPC Standing Committee adopted it on 7 November 2016. It requires network operators to store selected data in China and to assist public-security and national-security organs.

## Context

The Cyberspace Administration of China implements. Xi had created the Central Cyberspace Affairs Commission. He did not write every implementing standard. Real-name and data-localisation rules followed.

The 2017 National Intelligence Law and 2021 Personal Information Protection Law are neighbouring later or same-year instruments.

The General Secretary of the Chinese Communist Party, concurrently President of the People’s Republic of China and Chairman of the Central Military Commission, can set the Politburo agenda, nominate the State Council leadership, and command the armed forces. He does not write UN General Assembly resolutions, OHCHR assessments, WHO emergency-use listings, or Hong Kong ordinances by himself.

## Evidence and sources

State Council of the PRC carries the official instrument or communique. Reuters records the same dated act independently.

## Significance

The path is digital rights and [personal-data protection](/drivers/personal-data-protection): a completed localisation-and-assistance statute raises expected state access to network data.

## What is established and what is not

Established: a 1 June 2017 commencement of the Cybersecurity Law after a 7 November 2016 NPC Standing Committee adoption.

Not established: a unique later censorship coefficient from commencement day, or that Xi wrote every CAC standard.

What would change the picture: a contradictory original with a different date or name, a later repeal, a court that vacated the instrument, or a measured series that can be argued, with lag and alternatives, as a consequence of this instrument rather than of later institutions.

The date is the date of this instrument, not a licence to back-date every later harm or benefit.

CAC implements. Operators store data.. A later repeal, court stay, or successor order would be a different Fact with a different date. That pair identifies Cybersecurity Law of the PRC takes effect, not a later speech about Cybersecurity Law of the PRC takes effect.

Co-authors and later implementers named in Context remain on the file. Cybersecurity Law of the PRC takes effect on 2017-06-01 is not a licence to treat every later State Council of the PRC communique as this same act. If a later repeal, stay, or successor decree exists, it needs its own date and its own row. This dossier refuses to average Cybersecurity Law of the PRC takes effect into a personality. The contribution described on this Person row is limited to The NPC Standing Committee enacted the law under a Party leadership he chairs. CAC implements. Operators store data. That limit is the alternative to treating office-holding as authorship of every later series. The National People’s Congress, the State Council, provincial governments, the People’s Liberation Army, Hong Kong’s executive, and foreign counterparties share specific files. Allegation is not a completed judgment. An OHCHR assessment is not a criminal conviction. A white paper is not a census. A UN pledge is not a delivered emissions path.

## People

- Xi Jinping: https://factrail.ai/people/xi-jinping

## Drivers

- Digital-Rights and Platform-Power Regulation: https://factrail.ai/drivers/tech-digital-rights-regulation
- Personal-Data Protection: https://factrail.ai/drivers/personal-data-protection

## Sources

- https://www.reuters.com/article/us-china-parliament-cyber-idUSKBN132049
- https://english.www.gov.cn/policies/latest_releases/2016/11/07/content_281475484851788.htm

## Methodology

https://factrail.ai/methodology

Canonical: https://factrail.ai/facts/cn-cybersecurity-law-2017
