Cyberspace Administration of China (CAC) — Apps/mini-programs offering generative AI without security assessment
In its 2024 enforcement summary, the CAC reported taking down apps and mini-programs with opinion-influencing capacity that launched generative-AI services without the required security assessment, restored only after remediation.
Key takeaway — how to prevent this
AI services need a lawful basis, transparency and (for minors) age verification before launch in regulated markets — several DPAs blocked AI products first and asked questions later.
Case brief
Read from the authority's press release on 2026-09-06. Every holding carries a short verbatim quote from that text (in ZH, the document's language).
- Decided by
- Cyberspace Administration of China
- Parties
- Cyberspace Administration of China v. Apps and mini-programs offering generative AI services without security assessment
- Remedy
- Authorities ordered non-compliant generative AI apps and mini-programs to be taken down or have their features disabled until rectifications were completed and approved.
- Appeal
- Appeal status not stated
Key holdings
The Cyberspace Administration of China directed local offices to take down applications and disable features of generative AI services operating without mandatory security assessments.
“未经安全评估即上线提供生成式人工智能服务问题” — 二、加大网络安全、数据安全和个人信息保护等领域执法力度,筑牢网络空间安全屏障
Applications providing generative AI services that completed necessary rectifications were re-evaluated and restored online.
“对已完成整改的相关App及时依法复核恢复上架” — 二、加大网络安全、数据安全和个人信息保护等领域执法力度,筑牢网络空间安全屏障
Nationwide internet law enforcement removed 200 mobile applications and processed 40 mini-programs for legal and regulatory violations during 2024.
“下架移动应用程序200款,处置小程序40款” — 2024年全国网信系统严厉打击网络违法违规行为 切实维护网络空间清朗
In plain English
In a report published on February 25, 2025, the Cyberspace Administration of China summarized its nationwide internet law enforcement actions conducted throughout 2024. As part of these efforts, China's cyberspace regulators focused on enforcing cybersecurity, data security, personal information protection, and rules governing emerging technologies. Among the targeted violations, local cyberspace offices acting under central guidance took action against applications and mini-programs that launched generative artificial intelligence services capable of influencing public opinion or social mobilization without first undergoing required security assessments. For non-compliant generative artificial intelligence applications and mini-programs, authorities ordered enforcement measures including app removal and function shutdowns. Applications that successfully completed required rectifications were reviewed and allowed to return online to encourage orderly development. Across all categories of online violations in 2024, the cyberspace system summoned 11159 website platforms, issued warnings or fines to 4046 platforms, ordered 585 websites to suspend functions or updates, removed 200 mobile applications, handled 40 mini-programs, closed 10946 illegal websites in cooperation with telecom authorities, and closed 107802 accounts. This regulatory campaign demonstrates China's strict oversight of artificial intelligence deployment, requiring strict security evaluations before public release.
Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.