In August 2025, National Technical Committee 260 (SAC/TC260) on Cybersecurity of Standardization Administration of China released a series of announcements, collectively showcasing the latest achievements and planning directions in China’s cybersecurity standardization efforts. The updates include the official release of an international standard led by China, the approval of seven national cybersecurity standards, the solicitation of public comments on two major standard system frameworks, and the initiation of revision projects for multiple existing national standards in key areas. These developments mark a systematic, multi-faceted acceleration in the construction of China’s cybersecurity standard system.
Firstly, the China-led international standard ISO/IEC 27553-2: 2025 Information security, cybersecurity and privacy protection — Security and privacy requirements for authentication using biometrics on mobile devices Part 2: Remote modes was officially released in July 9, 2025. Initiated in September 2022, this standard defines a general architecture for remote biometric authentication on mobile devices, analyzes associated security threats, and specifies security requirements for biometric systems, mobile devices, and servers. It can also provide technical guidance for relevant industries, helping them enhance the security capabilities of biometric chip manufacturers, mobile device makers, software developers, and service providers.
Meanwhile, seven national cybersecurity standards were approved and released on August 1, 2025 and set to implement on February 1, 2026, providing specifications for foundational security and cutting-edge applications. These standards can be categorized into three major types:
- Fundamental Cryptographic Infrastructure:
- GB/T 19714-2025 Cybersecurity technology—Public key infrastructure—Certificate management protocol,
- GB/T 19771-2025 Cybersecurity technology—Public key infrastructure—Specification for minimum interoperability for PKI components, and
- GB/T 20520-2025 Cybersecurity technology—Public key infrastructure—Specification for time stamp.
- Security Management Practices:
- GB/T 31722-2025 Cybersecurity technology—Guidance on managing information security risks and
- GB/T 45940-2025 Cybersecurity technology—Implementation guide of cybersecurity operation and maintenance.
- Emerging Technology Security:
- GB/T 34942-2025 Cybersecurity technology—The assessment method for security capability of cloud computing service and
- GB/T 45958-2025 Cybersecurity technology—Security framework for artificial intelligence computing platform.
Beyond individual standards, TC260 is advancing systematic development to support laws and regulations such as Cybersecurity Law, Data Security Law, Personal Information Protection Law, and Regulations on Network Data Security Management, while establishing a robust standard system for data security and personal information protection. In this context, TC260’s Secretariat drafted the National Data Security Standard System (2025 Edition) (Draft for Comment) and the National Personal Information Protection Standard System (2025 Edition) (Draft for Comment), which were open for public comment until August 29, 2025. These frameworks aim to leverage the foundational, normative, and guiding role of standards in key tasks, industrial development, and risk prevention.
Furthermore, for the purpose of continuously improve the standard framework, TC260 initiated the revision of four national standards in key domains and is openly soliciting participating entities. These revisions focus on critical areas related to national security and socioeconomic development and the relevant details about the solicitation are shown in the table below.
This series of updates from TC260 clearly demonstrates the comprehensive advancement of China’s cybersecurity standardization work, combining high-level leadership with foundational support, systematic planning with focused breakthroughs.
Original sources: https://www.tc260.org.cn/front/postDetail.html?id=20250815161732
https://www.tc260.org.cn/front/postDetail.html?id=20250819144942
https://www.tc260.org.cn/front/postDetail.html?id=20250819145026
https://www.tc260.org.cn/front/postDetail.html?id=20250731172556
https://www.tc260.org.cn/front/postDetail.html?id=20250813151206
https://www.tc260.org.cn/front/postDetail.html?id=20250813151601
https://www.tc260.org.cn/front/postDetail.html?id=20250804155822
