{"id":16318,"date":"2025-06-27T07:53:00","date_gmt":"2025-06-27T07:53:00","guid":{"rendered":"https:\/\/focus.cbbc.org\/?p=16318"},"modified":"2025-06-26T09:16:52","modified_gmt":"2025-06-26T09:16:52","slug":"what-are-chinas-new-facial-recognition-regulations","status":"publish","type":"post","link":"https:\/\/focus.cbbc.org\/what-are-chinas-new-facial-recognition-regulations\/","title":{"rendered":"What Are China\u2019s New Facial Recognition Regulations?"},"content":{"rendered":"\n

China\u2019s latest rules on facial recognition technology introduce mandatory registration for companies handling significant volumes of personal data, alongside a practical guide to compliance<\/h2>\n\n\n\n

In an era where facial recognition technology is increasingly embedded in daily life, from unlocking smartphones to streamlining payments, China has introduced robust regulations to ensure its responsible use. On March 21, 2025, the Cyberspace Administration of China (CAC) and the Ministry of Public Security (MPS) released the Security Management Measures for the Application of Facial Recognition Technology, effective from June 1, 2025. These measures, supplemented by a clarifying notice from the CAC on March 30, 2025, mandate registration for companies processing facial data of over 100,000 individuals and provide a clear framework for compliance. For British businesses operating in or entering the Chinese market, understanding and adhering to these rules is essential to safeguard operations and protect personal data.<\/p>\n\n\n

\n
\"launchpad<\/a><\/figure>\n<\/div>\n\n\n

The New Regulatory Landscape<\/h2>\n\n\n\n

China\u2019s facial recognition regulations are part of a broader effort to strengthen data protection under the Personal Information Protection Law (PIPL), enacted in 2021. The Security Management Measures aim to balance innovation with the protection of individual privacy, addressing concerns about the misuse of sensitive biometric data. The rules apply to any organisation, domestic or foreign, processing facial recognition data in China, with a particular focus on those handling large datasets. According to the CAC, companies storing facial data of more than 100,000 individuals must register with their provincial-level cyberspace administration within 30 working days of reaching this threshold.<\/p>\n\n\n\n

Recognising the compliance burden, the CAC introduced a grace period for companies that hit this threshold before June 1, 2025, allowing them until July 14, 2025, to complete registration. This transitional measure reflects China\u2019s pragmatic approach to implementation, ensuring businesses have time to adapt without immediate disruption. Additionally, the CAC issued detailed ‘Instructions for Filling in the Facial Recognition Technology Application Filing System (First Edition)’, accessible via the Personal Information Protection Business System or the National Cyberspace Administration Government Affairs Hall on the CAC\u2019s website. These guidelines outline the registration process, required documentation, and compliance expectations, making it easier for companies to navigate the system.<\/p>\n\n\n\n