China AI Compliance
Resources for people who build, sell, audit or run AI systems in mainland China. The pages map Chinese laws, guidance and standards to the wiki's control library. The GCC and EU sections cover their regions in more depth and hold the general templates.
Verification required. Everything in this section about Chinese law was compiled on 7 October 2026 from secondary web sources and from memory of the law. No primary legal text was read. Article, clause and section numbers are left blank unless a source showed them; fill them in from the primary text. Check the primary text before relying on any claim. This is not legal advice.
China's position in one line
China regulates AI through specific administrative measures (algorithm recommendation, deep synthesis, generative AI, content labelling, ethics review, anthropomorphic AI). These sit on top of the Cybersecurity Law, the Data Security Law and the Personal Information Protection Law. A comprehensive AI law is on the 2026 legislative work plan and has not been enacted [Reported].
What is in this section
| Page | For | What it holds |
|---|---|---|
| China AI Regulatory Hub | Everyone | Instrument register, timeline, categories and roles, mapping to wiki controls, wiki coverage, verification checklist and sources |
| China: Role Guide | Practitioners, product companies, auditors, implementors | One guide with a part for each role |
| CN-T1 | All | Filing and registration readiness checklist |
| CN-T2 | All | AI-generated content labelling implementation record |
| CN-T3 | All | AI ethics review committee record |
| China Regulatory Crosswalk | GRC tooling | Instrument-to-control map with verification status, also as a CSV file |
How claims are tagged
| Tag | Meaning |
|---|---|
| [Reported] | Stated by secondary web sources found on 7 October 2026 (law-firm notes, vendor blogs, research notes). Not read in the primary text. |
| [Recalled] | Stated from memory of the law or guidance and not re-checked. Verify before citing it. |
| [Conflict] | Secondary sources disagree. Resolve from the primary text. |
| [Unverified] | Single source, marketing-grade source, or not researched. |
The templates are working documents, not regulator-approved forms.
Common templates to reuse
The GCC and EU sections contain working templates that are not tied to a region. Reuse them and adapt the regional lines.
| Need | Reuse | Adapt |
|---|---|---|
| System intake and tiering | GCC T01 or EU T01 | Replace the tier names with this region's categories (section 3 of the hub) |
| Inventory | GCC T09 or EU T09 | Add the regional columns listed in this section's templates |
| Audit checklist | GCC T08 or EU T08 | Replace the criteria with this region's instruments |
| Supplier due diligence | GCC T03 or EU T03 | Replace the regional questions |
| Incident workflow | GCC T05 or EU T05 | Fill in this region's authority matrix |
| Bias testing record | GCC T10 | Use as it is |
| Risk register | GCC T12 | Use as it is |
Keeping this section current
Re-check every month for new measures and standards. Use mainland counsel, because filing and security-assessment practice is local and detailed.