Measures for the Administration of Compliance Audits of Personal Information Protection

个人信息保护合规审计管理办法

A compliance audit is required when processing personal information of more than 10 million persons / CLP Reference: 5600/25.02.12 ; Promulgated: 2025-02-12 ; Effective: 2025-05-01

(Promulgated by the Cyberspace Administration of China on February 12, 2025 and effective as of May 1, 2025.)

(国家互联网信息办公室于二零二五年二月十二日公布，自二零二五年五月一日起施行。)

Order of the CAC No.18

国家网信办令第18号

Article 1: These Measures have been formulated in accordance with laws and administrative regulations such as the PRC Law on the Protection of Personal Information and the Regulations for the Administration of Network Data Security in order to regulate compliance audits of personal information protection and protect rights and interests in personal information.

第一条为了规范个人信息保护合规审计活动，保护个人信息权益，根据《中华人民共和国个人信息保护法》、《网络数据安全管理条例》等法律、行政法规，制定本办法。

Article 2: These Measures shall govern

第二条在中华人民共和国境内开展个人信息保护合规审计，适用本办法。