LexLint

Know the law your code answers to.

Law / China

Provisions on the Administration of Deep Synthesis Internet Information Services, Article 10

Provisions on the Administration of Deep Synthesis Internet Information Services (互联网信息服务深度合成管理规定) issued by CAC, MIIT and MPS, 2022, Art. 10

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 10 January 2023.

An AI governance rule binding public and private bodies.

As of 20 September 2026.

What it requires

  • Strengthen your management of deep synthesis content: review your users' input data and synthesis output by technical or manual means, and record and retain the related network logs, if you provide a deep synthesis service.
  • Build and maintain a feature database for identifying illegal and undesirable information, with entry standards, rules, and procedures.
  • Upon discovering illegal or undesirable information, take disposal measures and preserve relevant records in accordance with law, and promptly report the discovery to the cyberspace administration department and the relevant competent authority. The text marks only this reporting step as prompt, counted from the moment of discovery, and states no separate promptness standard for the disposal and record-keeping steps that precede it.
  • Separately take measures against the responsible user, such as warning, restricting features, suspending the service, or closing the account, in accordance with law and your service agreement.

What it reaches

How the hook was established

express

What makes it apply

Market targeting

What it makes you log

Logging duty

Article 10's second paragraph requires a deep synthesis provider to build a feature database for identifying illegal and undesirable information and states directly that the provider shall 'record and retain the related network logs' (记录并留存相关网络日志). Its third paragraph requires a provider that discovers illegal or undesirable information to take disposal measures, preserve relevant records (保存有关记录), and promptly report to the cyberspace administration department and the relevant competent authority. The first paragraph, requiring review of users' input data and synthesis output, states no record of its own. The article states no retention period for either record, and no numeric period appears anywhere else in this Provisions' text. The third paragraph's own words send a report to the cyberspace administration department and the relevant competent authority; they do not give either one a power to inspect or demand the preserved record itself. Article 21 of the same Provisions, outside this instrument's own citation, separately gives the cyberspace and other competent departments a standing supervision-and-inspection power that the provider must cooperate with, which is where that access route actually lives.

Kind
Explicit
As of
22 September 2026
Provision
Article 10, second and third paragraphs
Trigger
  • content_generation
  • security_incident

Who checks it

Audit expectation

none

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 10 of the Provisions on the Administration of Deep Synthesis Internet Information Services requires a deep synthesis service provider to strengthen its management of deep synthesis content, review users' input data and synthesis output by technical or manual means, build a database of features for identifying illegal and undesirable information, and record and retain the related network logs.

Where the provider discovers illegal or undesirable information, the article requires it to take disposal measures and preserve relevant records in accordance with law, and to promptly report the discovery to the cyberspace administration department and the relevant competent authority, while separately taking measures such as warning, restricting features, suspending service, or closing the account against the user responsible.

Only the reporting step in that sentence carries the word 'promptly' in the text; the disposal and record-preservation steps that precede it carry no separate promptness standard of their own.

When LexLint raises it

  • generates_content
  • deploys_chatbot
  • processes_voice
  • processes_biometrics

Read the law

official CAC notice, read and confirmed directly, including the Article 10 text

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app