China Cybersecurity Law (CSL)

Chapter IV: Network information security (Articles 42 to 51) – China Cybersecurity Law (CSL)

China Cybersecurity Law (CSL) 46: Art. 46 No theft, unlawful acquisition, sale or provision of personal information

What does 46 require?

No individual or organisation may steal personal information or obtain it by other illegal means, nor illegally sell it or illegally provide it to others; violations are penalised by the public security agencies.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Chapter IV: Network information security (Articles 42 to 51) – China Cybersecurity Law (CSL)

42-43 Art. 42-43 User information kept secret under a protection system; personal information collected lawfully, legitimately and necessarily, with public rules, stated purposes and consent, and nothing unrelated to the service
44-45 Art. 44-45 No disclosure, tampering or damage; no provision to others without consent unless irreversibly de-identified; security measures; breach remediation with user notice and reporting; deletion and correction on request
48 Art. 48 No websites, groups or postings for fraud, criminal instruction or prohibited items
49-50 Art. 49-50 Manage user-published information: stop prohibited content, delete it, keep records and report; no malicious programs or prohibited information in electronic messages and apps, and download and messaging services police their users
51 Art. 51 Complaint and reporting mechanism for network information security, published and promptly handled; cooperate with supervision and inspection

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All China Cybersecurity Law (CSL) controls