Internet information and content services
CAC publishes and administers rules for designated internet-information services and content-governance obligations, often alongside local cyberspace authorities and other sector agencies.
01Position in the system
Different compliance questions lead to different CAC routes
CAC publishes departmental rules and official materials on internet information services, network-content governance, personal-information protection and data governance. For cross-border data activity, its portal separates security assessment, standard-contract filing and personal-information export certification routes. The correct route depends on data type, volume, processing role, sector rules and current thresholds; CAC materials must be read together with statutes, administrative regulations and other competent authorities' rules.
What it doesIssues and administers data-export, personal-information, algorithm and internet-content measures.
When it mattersCross-border data transfer, PIPL compliance design, algorithm filing, and platform content governance.
02Jurisdiction
What falls within this authority’s remit
Identify the regulated activity, data category, processing role and any sector regulator before selecting a filing or compliance route.
Personal information and data exports
Official data-governance channels cover security assessments, standard-contract filings, export certification, personal-information protection and related guidance.
Cyber and data rulemaking
The official policy library distinguishes departmental rules, normative materials, implementation guides, questions and answers, and policy interpretations.
•Practical scenarios
Questions that change the research route
Use these examples to identify what must be checked before treating the institution as the correct forum.
| Situation | Why it matters | What to check |
|---|---|---|
| A company plans to send PRC data overseas | A CAC-administered export mechanism may apply | Important-data status, personal-information volume and sensitivity, exemptions, sector rules and current assessment, contract or certification requirements. |
| An online service handles regulated content | Internet-information and content rules may apply alongside licensing or sector obligations | Service type, content function, operator role, local authority and other competent regulators. |
| A CAC page explains a compliance issue | Guidance assists interpretation but may not itself be the binding instrument | Underlying law, regulation or departmental rule, publication date and whether later guidance has changed the route. |
03Official resources
Rules, services and official notices
Start with primary institutional sources. Verify service links and procedural status before relying on a filing path.
05Related legal concepts
Build the vocabulary around your research
Short, practical definitions for concepts most likely to appear alongside this institution.
01
02
Data-export security assessment
A CAC-administered review route for exports meeting the applicable statutory and regulatory conditions.
Standard contract filing
A prescribed personal-information export route involving the standard contract and filing requirements where applicable.
03
Research tag
Departmental rule
A regulatory instrument issued within delegated authority, distinct from statutes, administrative regulations and non-binding explanations.
06Primary sources
How this entry was source-reviewed
The review date describes when the listed primary sources were checked. It is not a guarantee that jurisdiction remains unchanged after that date.
CAC departmental-rule indexOfficial regulatory publication channel.
Open source
CAC data-export filing guidanceOfficial routes and materials for security assessment and standard-contract filing.
Open source
Reference boundary
CAC is not the only authority in many digital matters.
Check cybersecurity, telecom, public-security, state-secrets, sector and local-authority responsibilities alongside the CAC route.