China's Sweeping Cybercrime Bill Threatens Free Speech, Privacy, and Global Internet Users

Last updated: 22 September 2026

On January 31, 2026, China's Ministry of Public Security published a sweeping 68-article Draft Law on Cybercrime Prevention and Control. On March 17, Human Rights Watch released a detailed analysis concluding the bill goes far beyond addressing legitimate cybercrime concerns — containing provisions that pose a significant and systemic threat to human rights, both inside China and globally.

Real-Name Surveillance, Turbo-Charged

China already requires real-name registration across online platforms. The new bill goes further, mandating "dynamic" identity reverification using algorithmic checks during periods or locations deemed high-risk (Article 16). This means users' identities can be checked in real time, eliminating any remaining pockets of anonymous expression.

Article 57 would allow police to blacklist individuals from basic services — including SIM cards — without transparency or a clear removal mechanism. Article 62 enables authorities to record violations in citizens' credit files, linking digital behavior to financial and social consequences.

"The draft cybercrime law reflects President Xi Jinping's broad efforts to restrict digital and physical spaces by allowing state security to expand and tighten social controls, including beyond borders. The law would further undermine online anonymity, chill free speech, and restrict access to information."

— Yalkun Uluyol, China Researcher, Human Rights Watch

Criminalizing Dissent Under Vague Offenses

The bill's most dangerous provisions involve vague and overbroad language criminalizing activity that "disrupts online order," harms "national security" or "public interest," or "disseminates false information". Under existing Chinese law, such terms have been used to prosecute journalists, activists, and ordinary citizens for legitimate speech.

HRW also flagged Articles 24 and 25, which impose undue restrictions on legitimate cybersecurity research — chilling academic and journalistic work that exposes government surveillance. Up to 5 million yuan (US$725,000) in fines and 15 days' detention can be imposed for "serious" violations.

Extraterritorial Reach: A Threat to Global Companies

Article 2 extends the law's reach to Chinese citizens abroad. Article 53 applies it to foreign companies providing internet services to users in China. Under Article 55, Beijing could freeze assets and bar entry of foreign entities whose content is deemed to harm Chinese government interests — a sweeping extraterritorial power with no precedent in international law.

VPNs and tools used to bypass the "Great Firewall" would be explicitly criminalized under the proposed framework — violating the right to seek and receive information "regardless of frontiers" under Article 19 of the Universal Declaration of Human Rights.

Sources

HRW: China: Cybercrime Bill Entrenches Censorship, Surveillance (March 17, 2026)

UN Special Rapporteur on Freedom of Expression: Encryption and Anonymity