The Cyberspace Administration of China plans to establish regulations to simplify the obligations of small-scale personal information handlers.

To support the innovative development of small, medium-sized, and micro enterprises and to simplify the measures for small personal information handlers to fulfill their obligations under laws and regulations on personal information protection, the Cyberspace Administration of China has drafted the Regulations on Simplified Measures for Personal Information Protection by Small Personal Information Handlers (Draft for Comments). The draft was published to the public for comments on the 3rd. The deadline for submitting feedback is May 3, 2026.

The draft clarifies the scope of the definition of small personal information handlers. A small personal information handler refers to a personal information handler that processes personal information of fewer than 100,000 individuals. At the same time, it provides for key requirements relating to personal information protection as well as the simplification of rules for processing personal information, the simplification of obligations for small personal information handlers, and provisions on not imposing penalties or imposing lighter penalties or reducing penalties.

The draft states that support should be provided by various regions and departments by organizing training sessions, lectures, legal-awareness-raising activities, and consultation and guidance, in order to help small personal information handlers improve their personal information protection capability and level. It encourages various regions and departments to provide small personal information handlers with basic infrastructure, technical tools, consulting services, and other resources for safe and convenient personal information processing, in order to reduce compliance costs for small personal information handlers. ( Xinhua News Agency )