On August 7, 2026, the Cyberspace Administration of China (CAC) publicly solicited opinions on the “Regulations on the Protection of Personal Information by Large-scale Personal Information Processors (Draft for Solicitation of Comments)”, with the deadline for feedback set for September 7, 2026. These regulations aim to standardize the personal information processing activities of large-scale personal information processors and protect the legitimate rights and interests related to personal information. The regulations require large-scale personal information processors to take measures such as encryption, de-identification, access control, and anonymization to ensure the security of personal information. They may utilize the public services for national online identity authentication and are encouraged to enhance protection levels by using data tagging technologies and obtaining personal information protection certifications. At the same time, they are encouraged to innovate in technologies, products, and services related to personal information protection, actively participate in the formulation of international standards and rules, and promote the coordination and mutual recognition of rules and standards.