China overhauls ISP rules to better protect children online
New rules include 'youth modes' for all video services and mandatory security software for all new devices


Internet service providers (ISPs) in China will have to implement new rules aimed at protecting minors who surf the Internet.
The Cyberspace Administration of China (CAC) has produced new regulations that it says will help create a healthy and orderly network environment, as well as a safe space for children accessing content online.
The rules affect any ISP with a "huge number of minor users and significant influence among minors", although the exact classification isn't clear at this time. In the design, research and development, operation, and other stages of their services, these ISPs will have to fully consider the the mental and physical health of minors in their business decisions, and regularly conduct cyber protection impact assessments.
ISPs will also be required to establish a compliance system in accordance with state regulations, and establish an independent organisation mainly composed of external members to supervise online protection.
In terms of content, any online games, live broadcasts, audio and video channels, and social networking services will need to establish a so-called 'youth mode' specifically tailored for children, which will also need to incorporate national regulations, such as those limiting how long they can be accessed and what functions can be used.
Additionally, ISPs will be forced to cut ties with any product or service providers that violate laws and administrative regulations or infringe upon the physical and mental health of minors.
RELATED RESOURCE
Introducing the zero trust edge model for security and network services
Get a better understanding of emerging zero trust solutions
Importantly, they will also have to publish a special report on the social responsibility of minors online protection every year, and accept social supervision through public comments and other methods.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
The new legislation also proposes that online protection software or mobile phones and computers specially designed for minors should have the capability to identify illegal information or information that may affect minors’ physical and mental health.
As such, manufacturers of these products are also required to install internet protection software before the products leave the factory, or explicitly notify users of how to install it.
This isn’t the first time the CAC has cracked down on tech companies this year, as in January it announced it would introduce new rules affecting how tech platforms are able to list abroad or use recommendation algorithms. From 15 February, companies with data for over 1 million users are required to undergo a security review before listing their shares overseas.
The CAC said the main purpose of the rules is to further protect network and data security and to maintain national security.
Zach Marzouk is a former ITPro, CloudPro, and ChannelPro staff writer, covering topics like security, privacy, worker rights, and startups, primarily in the Asia Pacific and the US regions. Zach joined ITPro in 2017 where he was introduced to the world of B2B technology as a junior staff writer, before he returned to Argentina in 2018, working in communications and as a copywriter. In 2021, he made his way back to ITPro as a staff writer during the pandemic, before joining the world of freelance in 2022.
-
Lenovo promotes Per Overgaard to general manager for ISG EMEA
News Overgaard will spearhead Lenovo's Infrastructure Solutions Group as organizations continue to invest in AI and advanced infrastructure
By Daniel Todd
-
RSA Day One: Vibe Is 'All In' on AI for Security
News Artificial intelligence took center stage as RSA looks at how the discussion has moved from generative AI to agentic AI
By Scott Bekker
-
Latitude Financial's data policies questioned after more than 14 million records stolen
News Some of the data is from at least 2005 and includes customers’ name, address, and date of birth
By Zach Marzouk
-
Latitude hack now under state investigation as customers struggle to protect their accounts
News The cyber attack has affected around 330,000 customers, although the company has said this is likely to increase
By Zach Marzouk
-
IDCARE: Meet the cyber security charity shaping Australia and New Zealand's data breach response
Case Studies IDCARE is recruiting a reserve army to turbocharge the fightback against cyber crime not just in the region, but in the interests of victims all over the world
By Zach Marzouk
-
Australia commits to establishing second national cyber security agency
News The country is still aiming to be the most cyber-secure country in the world by 2030
By Zach Marzouk
-
Medibank bleeds $26 million in cyber costs following hack
News The company believes this figure could rise to $45 million for the 2023 financial year
By Zach Marzouk
-
TikTok's two new European data centres to address data protection concerns
News The company is under pressure to prove its user data isn’t being accessed by the Chinese state
By Zach Marzouk
-
Cyber attack on Australia’s TPG Telecom affects 15,000 customers
News It is the third cyber attack on a major Australian telco since October
By Zach Marzouk
-
Telstra blames IT blunder for leak of 130,000 customer records
News Australia’s biggest telco said that the error was due to a mismanagement of databases and not a cyber attack
By Zach Marzouk