Cyberspace Administration of China

What Cyberspace Administration of China does

The Cyberspace Administration of China (CAC) is the national-level regulatory agency of the People's Republic of China responsible for internet governance, cybersecurity oversight, data protection enforcement, and AI regulation. Established in February 2014 under the Central Cybersecurity and Informatization Leadership Group (restructured in 2018 as the Central Cybersecurity and Informatization Commission), the CAC operates under the dual leadership of the Communist Party Central Committee and the State Council, with Zhuang Rongwen as Director and four Deputy Directors. The agency regulates internet services for China's 1.05 billion+ internet users and exercises authority over both domestic platforms and foreign technology companies seeking market access, anchored in the National Security Law, the Cybersecurity Law, and the Personal Information Protection Law (PIPL).

The CAC's operational technology consists of regulatory platforms rather than commercial products. Key systems include the Algorithm Filing System (beian.cac.gov.cn) for algorithmic recommendation oversight, the Blockchain Service Filing System, the Data Exit Security Assessment platform for cross-border data transfer evaluations, the Personal Information Protection System for PIPL compliance, and the Government App Management System. The agency also publishes the official China Cyberspace News portal (cac.gov.cn) and jointly operates the SinoGuide App with the National Immigration Administration as a bilingual digital service platform for foreigners living in China.

The CAC does not operate a commercial revenue model. It is funded through state budget allocations, exercises statutory authority over regulatory matters, and generates no independent revenue. Its "customers" in a regulatory sense are the foreign technology companies, domestic internet platforms, and general public subject to its regulatory frameworks. The agency coordinates with multiple ministries including the Ministry of Public Security, Ministry of Industry and Information Technology, the National Development and Reform Commission, and the People's Bank of China on cross-agency regulatory initiatives, and operates through provincial and municipal cyberspace administration offices across all 31 provinces and autonomous regions of China.

Name

Cyberspace Administration of China

Legal name

Cyberspace Administration of China

Website

https://www.cac.gov.cn

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Short description

The Cyberspace Administration of China is China's national-level internet regulator, enforcing cybersecurity, data protection, and AI governance frameworks for 1.05 billion+ internet users under the Central Cybersecurity and Informatization Commission.

Ownership category

akta.pro rank

Product category

Internet and Cybersecurity Regulation

NAICS

Executive, Legislative, and Other General Government Support (921), Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (92615)

akta.pro primary industry

Data Protection, Privacy & Cybersecurity Regulators (BPAIAOAH)

akta.pro secondary industries

Communications, Media & Spectrum Regulators (BPAIAOAI), Privacy Governance & Consent Management (HDADAIAI), Financial Services Regulators (Banking, Securities, Insurance) (BPAIAOAK)

Keywords

• Internet regulation
• Cybersecurity governance
• Data protection enforcement
• AI policy frameworks
• Content management

Headquarters

HQ city

Haidian

HQ country

China

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure, Others

Core offering

The Cyberspace Administration of China (CAC) is the central government regulatory body responsible for internet governance, cybersecurity oversight, data protection enforcement, AI regulation, and internet content management in China. It drafts and enforces regulations, conducts cybersecurity reviews of technology products, manages algorithm and blockchain service filings, handles cross-border data transfer assessments, and issues personal information protection compliance frameworks.

Product overview

The Cyberspace Administration of China (CAC) is China's top internet regulator operating as a government body under the Central Cybersecurity and Informatization Commission. CAC does not offer commercial products but operates regulatory platforms and information systems for internet governance. Key platforms include: the official China Cyberspace News website (中国网信网) for publishing official announcements; the Algorithm Filing System (互联网信息服务算法备案系统) for regulatory oversight of algorithmic services; the Blockchain Service Filing System for blockchain governance; Data Exit Security Assessment systems for cross-border data transfers; and the Personal Information Protection System for PIPL compliance. CAC has launched the SinoGuide App (中外指南) as a mobile service platform for foreigners in China. Additionally, CAC has issued landmark AI regulatory frameworks including the world's first dedicated AI Agent regulatory framework and digital human regulations.

Differentiator

Problem solved

Functional benefit

Products and services

• 中国网信网 (China Cyberspace News) Official government news portal operated by CAC publishing official announcements, policy interpretations, and regulatory updates on cybersecurity and informatization matters.
• SinoGuide App (中外指南) One-stop smart service mobile platform for foreigners in China launched jointly with National Immigration Administration, supporting Chinese and English languages, integrating policy guidance with daily life services including payments, transportation, and accommodation.
• 互联网信息服务算法备案系统 (Algorithm Filing System) Government platform for algorithm filing and registration of internet information services, enabling regulatory oversight of algorithmic recommendations and AI services.
• 区块链信息服务备案管理系统 (Blockchain Service Filing System) Government platform for filing and managing blockchain information services under regulatory requirements.
• 数据出境安全评估 (Data Exit Security Assessment) Assessment system for cross-border transfer of personal information and important data, implementing PIPL and data security law requirements.
• 个人信息保护业务系统 (Personal Information Protection System) Platform for handling personal information protection complaints, compliance audits, and rights verification under China's PIPL.
• 政务应用程序规范化管理系统 (Government App Management System) System for standardizing and managing government mobile applications, including filing and compliance tracking.
• AI Agent Standardized Application Framework (AI Agent标准化应用框架) World's first dedicated regulatory framework for AI agents establishing three-tier decision authorization: autonomous for routine tasks, human approval for material decisions, and prohibition on high-stakes decisions.
• AI Content Labeling Rules Regulatory framework requiring content providers, propagation service providers, app platforms, and users to label AI-generated content with explicit or implicit indicators.
• Digital Human Regulatory Framework (数字虚拟人监管框架) Draft regulations governing digital virtual humans requiring clear labeling of AI-generated content and explicit consent for using personal likeness and voice.
• Simplified Personal Information Protection Measures New rules simplifying PIPL compliance for small-scale personal information handlers processing data of fewer than 100,000 individuals.

Segments3 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability7 records

Partnerships

Seven partnerships are on record, tiered core and minor.

• Ministry of Public Security of ChinacoreOthers · 22 July 2026Jointly issued the Provisions on Simplified Measures for Personal Information Protection by Small-Scale Personal Information Handlers, effective September 1, 2026. The two agencies coordinate on personal information protection enforcement for small-scale data handlers.
• Apple Inc.minorStrategic or Co-development PartnerApproved Apple's Apple Intelligence AI features for use in China, integrating Alibaba's Qwen AI models and Baidu's ERNIE models, built on Alphabet Inc.'s Google Gemini foundation models. This was a regulatory approval process for AI services in China's market.
• National Development and Reform CommissioncoreOthersJointly issued implementation guidelines to regulate AI agents with the Cyberspace Administration of China and Ministry of Industry and Information Technology. The guidelines define AI agents and outline four major areas including consolidating development foundations, ensuring safety, and application-driven traction.
• Ministry of Industry and Information TechnologycoreOthersJointly issued AI agent regulation guidelines with the Cyberspace Administration and National Development and Reform Commission, outlining regulatory framework for intelligent systems capable of autonomous perception, memory, decision-making, and execution.
• People's Bank of ChinacoreOthersIssued directives ordering Ant Group and JD.com to halt stablecoin launch plans in Hong Kong, citing concerns about privately controlled digital currencies potentially undermining state monetary authority and jeopardizing the e-CNY digital yuan rollout.
• Hong Kong Monetary AuthorityminorOthersWhile not a direct partnership, the CAC coordinates with HKMA on stablecoin issuer licensing framework, with mainland regulators intervening to prevent tech companies from participating in Hong Kong's stablecoin pilot program.
• National Immigration AdministrationminorOthersJointly launched the SinoGuide App on November 7, 2025, at the World Internet Conference Wuzhen Summit - a one-stop smart service mobile platform for foreigners living in China, integrating policy guidance with daily life services.

Scale indicators1 record

Recent moves6 records

Expansion highlights5 records

Others

• Ministry of Industry and Information Technology (MIIT): China's central industrial and ICT regulator that co-issues AI agent and digital economy regulations with CAC. Functionally adjacent regulator covering overlapping internet, telecom, and AI policy domains, with joint rulemaking authority on key technology frameworks.
• Ministry of Public Security of China: Chinese law enforcement ministry with cybersecurity jurisdiction; CAC co-issues personal information protection rules with MPS (e.g., the September 2026 simplified PIPL measures for small-scale handlers) and collaborates on cybercrime enforcement.
• National People's Bank of China (PBOC) cybersecurity coordination arm: PRC central bank coordinating with CAC on digital currency and fintech regulation (notably the 2025 halt of Ant Group/JD.com stablecoin plans). Sister regulator within the Chinese state apparatus with overlapping digital-asset regulatory authority.

Regional players

• European Data Protection Board (EDPB): EU-wide independent body coordinating national data protection authorities and issuing cross-border GDPR guidance. Functionally similar to CAC's role on PIPL enforcement and cross-border data transfer assessments, serving as the comparable data protection coordinator for another major jurisdiction.
• Cybersecurity and Infrastructure Security Agency (CISA): US federal agency responsible for cybersecurity and infrastructure protection, operating under DHS. Comparable cybersecurity coordination role in the US, though with less direct authority over commercial data protection and content regulation than CAC holds in China.
• Information Commissioner's Office (ICO) UK: UK's independent data protection and information rights regulator. Most functionally comparable peer to CAC on personal information protection enforcement, with similar mandate covering data subject rights, cross-border transfers, and AI/data intersection.
• Personal Information Protection Commission (PPC) Japan: Japan's national data protection authority enforcing APPI. Comparable in mandate to CAC's personal information protection work, though operating in a more multi-agency regulatory environment with lighter content regulation scope.
• Korea Internet & Security Agency (KISA): South Korean government agency under MSIT responsible for internet security, personal information protection, and content oversight. Closest Korean counterpart to CAC's combined cybersecurity + content regulation function.
• Personal Data Protection Commission Singapore (PDPC): Singapore's primary data protection regulator with enforcement powers over cross-border transfers, AI governance, and consumer data rights. Functionally analogous to CAC's PIPL enforcement arm with similar cross-border transfer assessment focus.
• Federal Trade Commission (FTC): US federal agency with enforcement authority over consumer data protection, privacy, and cybersecurity through unfair/deceptive practices authority. Most comparable US peer to CAC on commercial data protection enforcement, though with narrower content regulation scope.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/cyberspace-administration-of-china

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Subsidiaries2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyberspace Administration of China