TITLE: China's National Cybersecurity Standards Committee Calls for Personal Data Protection Standard Application Case Studies
BODY:
On March 30, 2026, the Secretariat of the National Cybersecurity Standardization Technical Committee (网安标委) issued a notice inviting organisations to submit case studies demonstrating the practical application of personal data protection standards across industries.
The initiative aims to strengthen the implementation and effectiveness of China's national cybersecurity standards. The case study collection focuses on personal data protection themes, including personal information protection compliance audits, sensitive personal information processing, personal data de-identification, and application (APP) personal information security protection. The committee seeks to identify and promote best practices from personal information processors across various sectors that demonstrate effective standard application in safeguarding personal data.
The activity comprises four phases: application submission, review, public announcement, and promotion. The application deadline is April 30, 2026. The review process, running from May 1 to May 31, 2026, includes formal examination of application completeness and compliance, followed by technical review conducted through site visits and presentations. Selected cases will be publicly announced between June 1 and June 5, 2026. During the promotion phase (June 6 to June 30, 2026), approved cases will be added to the national cybersecurity standard application practice case database and compiled into a collection for promotion through case presentations, exhibitions, interpretive articles, and promotional videos on the cybersecurity standardisation dissemination platform.
Applicant organisations must demonstrate good social credit standing with no adverse records in quality, safety, or corporate social responsibility. Applications must include completed application forms, detailed practice case reports, and internal publicity certificates. Multiple organisations may submit joint applications (maximum five entities), with each entity providing sealed documentation. Organisations should submit electronic versions of all materials to wang.hs@cesi.cn by April 30, 2026.
REFERENCES:
National Cybersecurity Standardization Technical Committee Secretariat (2026). Notice on Collecting Personal Information Protection Standard Application Practice Cases. Available at: https://www.cesi.cn/