中国要求网络运营商自2025年11月1日起1至4小时内报告重大网络事件。 China to require network operators to report major cyber incidents within 1–4 hours starting Nov. 1, 2025.

中国网络空间管理局(CAC)正在推行新的网络安全事件报告规则,自2025年11月1日起生效,要求网络运营商根据严重程度在一至四小时内报告重大和特别严重事件。 China's Cyberspace Administration of China (CAC) is introducing new cybersecurity incident reporting rules effective November 1, 2025, requiring network operators to report major and particularly serious incidents within one to four hours, depending on severity. 这些措施按影响对事件进行分类,包括系统故障、数据破损、经济损失以及政府、保健和交通等关键服务中断。 The measures classify incidents by impact, including system outages, data breaches, economic loss, and disruption to critical services like government, healthcare, and transport. 特别严重的事件——如泄漏1亿多份个人记录、关键网站24小时中断或对国家安全的威胁——必须在1小时内报告。 Particularly serious incidents—such as leaks of over 100 million personal records, 24-hour outages of key websites, or threats to national security—must be reported within one hour. 操作人员必须提供详细的事故信息,并因延误或隐瞒而受到处罚。 Operators must provide detailed incident information and face penalties for delays or concealment. 这些规则旨在提高反应速度,防止升级,并加强遵守,与现有的网络安全法律保持一致,并支持实时监测和报告制度。 The rules aim to improve response speed, prevent escalation, and strengthen compliance, aligning with existing cybersecurity laws and supporting real-time monitoring and reporting systems.