The Ministry of Public Security has released 10 typical cases of cybersecurity administrative law enforcement

Typical cases of cybersecurity administrative law enforcement have been exposed, focusing on data and personal information protection See how public security authorities carried out rectification and penalties, and learn about the latest governance results of "Protect the Network—2026"

On September 17, the Ministry of Public Security announced 10 typical cases of administrative law enforcement in network security for 2026, involving multiple areas such as data security, network security, and personal information protection. Public security authorities said that since the beginning of this year, they have continuously advanced the special campaign “Protect the Net—2026,” carried out governance centered on critical information infrastructure, important network systems, and data security, and investigated and dealt with a number of administrative cases involving failure to fulfill security protection obligations. The notice shows that progress has been made in institutional development, joint prevention and control, and risk inspection and removal. The Ministry of Public Security noted that it has worked with relevant departments to improve regulations related to cyberspace security, and has issued warnings and guidance on protection to the public through an information notification mechanism. During the special rectification campaign, more than 7,900 inspections of network and data security risks were carried out, 38,000 various risks and vulnerabilities were identified and rectified, 652 mobile apps that illegally collected personal information were publicly exposed, and 38,000 related administrative cases were investigated. The typical cases announced this time are distributed across Jiangsu, Anhui, Jiangxi, Shandong, Guangxi, Sichuan, Yunnan, Gansu, Ningxia, and other places. They mainly involve situations such as enterprises or organizations failing to implement protections for data transmission and storage, failing to establish security management systems, failing to report risks as required, inadequate personal information protection, and certain individuals illegally obtaining system data. Public security authorities have all imposed administrative penalties or ordered rectification in accordance with the law, and have supervised some of the