Key practical points:
• Core and common cryptography protect state secrets and are managed by the authority.
• Commercial encryption is available to individuals and firms to protect general data.
• Certain commercial-encryption products face mandatory testing and certification.
• Import and export of specified encryption products are controlled.
• Critical information infrastructure may face specific encryption requirements.
💬 General consulting
Cryptography Law · Yalla China
中华人民共和国密码法 / Cryptography Law
Enacted: 2019-10-26 ✅ Effective: 2020-01-01
📝 Overview
A law regulating cryptography, dividing it into core, common, and commercial encryption. It promotes commercial encryption while controlling its import, export, and compliance in sensitive sectors.
This is general information only, not legal advice. For your specific case, consult a licensed lawyer.
📜 The law text / key provisions
💬 Practical reading
💬 This is a general reading/opinion for orientation — not the official legal text nor legal advice.
If your product or service uses encryption in China, check the encryption type and the certification and import requirements. Commercial encryption is allowed but regulated. General orientation, not legal advice.
📎 Official source
npc.gov.cn
🕒 Updated: 16 March 2026