China Cybersecurity Law (CSL) 25: Art. 25 Key network equipment and specialised cybersecurity products certified or tested before sale

Key network equipment and specialised cybersecurity products must, under the mandatory requirements of the relevant national standards, pass security certification by a qualified institution or meet the requirements of security testing before they may be sold or provided; the national cyberspace affairs departments with the State Council departments draw up and publish the catalogue of such equipment and products and promote mutual recognition of certification and testing results so that certification and testing are not repeated. The article's text is unchanged by the 2025 Decision; the Decision added Article 63, under which selling or providing such items uncertified, untested or failing certification or testing draws an order to stop, a warning, confiscation of illegal gains and a fine (RMB 20,000 to 100,000 where gains are absent or below RMB 100,000, one to five times the gains above that), with suspension or licence revocation where serious.