If the reporting requirement is triggered, operators must report the incident within no more than four hours, followed by a comprehensive follow-up report. Additionally, they must ensure that ...
New PRC cybersecurity incident reporting rules took effective in Nov. 2025.