2026 Amendment to the Cybersecurity Law Implemented: 34 Types of Uncertified Cybersecurity Products Subject to Fines Up to 5 Times the Profits
2026 Amendment to the Cybersecurity Law Implemented: 34 Types of Uncertified Cybersecurity Products Subject to Fines Up to 5 Times the Profits
In 2026, the amended Cybersecurity Law of the People's Republic of China officially came into effect, comprehensively upgrading the supervision of key network equipment and dedicated cybersecurity products. The new regulations clarify that selling or providing related products without security certification/testing can be subject to fines of up to five times the illegal gains, and serious offenders may face business suspension or even license revocation. Compliance has changed from an "optional" to a market "entry ticket."
I. Scope of Mandatory Supervision: 4 Types of Key Equipment + 34 Types of Dedicated Products
According to the latest catalog jointly released by the Cyberspace Administration of China and other four departments in July 2023, the following products must pass security certification or testing before they can be sold or provided:
Key Network Equipment (4 types, mandatory certification)
High-performance routers: Overall system throughput ≥ 12Tbps, routing table capacity ≥ 550,000 entries.
High-performance switches: Overall system throughput ≥ 30Tbps, packet forwarding rate ≥ 10Gpps.
Rack-mounted servers: ≥8 CPUs; ≥14 CPU cores per CPU; ≥256GB memory.
Industrial PLCs: Used for industrial automation control; instruction execution time ≤0.08 microseconds.
Network Security Products (34 categories, optional certification or testing)
Covering five functional categories:
Protection: Firewalls, IPS, UTM, antivirus gateways, anti-DDoS, etc.
Detection: IDS, vulnerability scanning, security situation awareness, security configuration checks.
Management: Security auditing, security management platforms, identity authentication, log analysis, USB control, etc.
Data Security: Data backup and recovery, DLP, file encryption, data destruction software.
Infrastructure: Secure databases, secure operating systems, PKI, secure network storage.
High-risk warning: Firewalls, IDS, PLCs, servers, and data backup products have been key areas of regulatory scrutiny in recent years.
II. Enterprise Compliance Path Recommendations
Confirm Product Category: Refer to the above 4+34 product categories to determine if your products are listed.
Choosing a Compliance Path:
Critical Network Equipment: Must pass security certification (according to GB 40050-2021).
Dedicated Network Security Products: Optional security certification (GB 42250-2022) or security testing.
Execution Process: Contact an authorized organization through the "Dedicated Network Security Product Security Testing Service Platform," prepare technical documents, a self-inspection report, and samples. After submission, the type testing period typically lasts 20–55 working days.
For relevant companies, proactively achieving compliance is not only a hedge against the risk of millions in fines, but also an essential qualification for gaining customer trust and participating in government and large enterprise project bidding.
Send Inquiry to This Supplier
You May Also Like
-
Bluetooth BQB CertificationUS$ 100MOQ: 1 Piece
-
Indonesia Officially Opens 2.6 GHz Band (Band 41/n41) for 4G/5G; New Equipment Certification Required to Comply With Decree No. 569 of 2025US$ 100MOQ: 1 Piece
-
Indonesian DJID Regulation No. 469 of 2025 Takes Effect: Mandatory Certification Required for Export of Wireless Communication ProductsUS$ 100MOQ: 1 Piece
-
Uzbekistan's New RoHS Regulation Will Take Effect in February; Electronics Manufacturers Need to Plan Ahead for Compliance.US$ 100MOQ: 1 Piece
-
EU Toy Regulations Updated, CE-EN71 Certification UpdatedUS$ 100MOQ: 1 Piece
-
What is REACH Testing? How to Comply With REACH Certification Standards?NegotiableMOQ: 1 Piece
-
Power Strips: South African National Requirements IEC 60884-1 Test ReportUS$ 100MOQ: 1 Piece
-
China's RoHS Officially Enters a New Era of Controlling 10 Hazardous SubstancesUS$ 100MOQ: 1 Piece
-
The Australian SAA Certification Standard for Plugs and Sockets, AS/NZS 3112, Has Been Updated.US$ 100MOQ: 1 Piece
-
New PSE and METI Filing Requirements for Cross-Border E-commerce in Japan in 2025US$ 100MOQ: 1 Piece