Chinese Regulators Open Cybersecurity and Administration Measures Draft for Discussion

Chinese regulators, led by the People’s Bank of China (PBOC), have jointly drafted the “Measures for the Administration of Cybersecurity in the Financial Industry (Draft for Public Comment)” and publicized it.

Regulators Request Feedback on New Guidelines

In an official publication, the PBOC noted that it worked with the State Financial Regulatory Commission, the China Securities Regulatory Commission, and the State Administration of Foreign Exchange to produce the document, which aims to regulate cybersecurity management in the financial industry further.

According to the PBOC, three major channels are open to the public and anyone willing to submit feedback on the draft. The regulator provided a dedicated email address for such submission, advising respondents to specify the subject as “Comments on the Measures for the Administration of Cybersecurity in the Financial Industry” in the appropriate section.

Alternatively, the PBOC provided another mailing channel through the Science and Technology Department, asking respondents to title their messages “Opinions on the Measures for the Administration of Cybersecurity in the Financial Industry.” Meanwhile, members of the public wishing to send feedback via fax can do so using a dedicated phone line provided by the PBOC. According to the publication, the deadline for feedback is August 3, 2026.

A New Guideline for China’s Financial Sector

For context, the aforementioned “Measures for the Administration of Cybersecurity in the Financial Industry” draft mandates financial institutions to strengthen risk management through 33 articles focusing on corporate responsibility, critical infrastructure protection, and strict data security.

The regulation emphasizes the use of approved encryption, emergency drills, and severe penalties for non-compliance, including penalties for failing to halt the spread of illegal information. Meanwhile, the PBOC noted that the draft measures will improve the cross-department cybersecurity regulatory framework for the financial sector, while defining the bottom line for financial industry cybersecurity compliance and the legal responsibilities that should be borne when that is violated.

The PBOC acknowledged the risks associated with organized, high-intensity cyberattacks and the deep integration of emerging technologies with financial business operations. However, it stated that the steps taken are necessary to ensure the continuous and stable operation of the financial system and help prevent the transformation of cybersecurity risks into financial risks.

Related Articles:China’s PBOC Reaffirms Crackdown on Crypto Trading and Illegal Stablecoin Usage