THE THREAD / Security & law
Every stage of growth means understanding its limits.
Security, privacy, and law are not a separate chapter — they run through all six eras and every role. Every era page has a “Security & law” section.
Before you start a piece of work
01 / Information and privacy
Do we really need this data?
Before collecting, viewing, storing, or sharing information, be clear about its purpose and scope. Screenshots, logs, and sample content can contain personal information too.
02 / Permissions and authorization
Am I allowed to do this?
Understand account and system permissions, and work within what you are authorized to do. Confirm the environment, the target, and the impact before you act.
03 / Content and sources
Can this content be used this way?
Record where information comes from, and check the usage terms for images, code, and text. Quoting, reposting, editing, and publishing each carry different responsibilities.
04 / Collaboration and responsibility
How do we handle it together when something goes wrong?
Agree in advance on who is responsible, how to communicate, and how to recover. When you spot something unusual, record and report it promptly so the problem can be tracked and fixed.
The security & law thread across six eras
Index of laws in force
From the entries marked as in force in our law index laws_index.csv. Links point to official or public database texts; hover to preview the version and dates.
- United States, 18 U.S.C. Chapter 119 Wire and Electronic Communications Interception and Interception of Oral Communications (Wiretap Act, §§2510–2523)(opens in a new window)
United States Code 2024 Edition
- Adopted
- 1968
- In force
- — (current codified statutory text)
- United States Computer Fraud and Abuse Act (18 U.S.C. §1030)(opens in a new window)
United States Code 2024 Edition (as amended through this edition)
- Adopted
- 1984
- In force
- — (current codified statutory text)
- United States, 18 U.S.C. Chapter 121 Stored Wire and Electronic Communications and Transactional Records Access (Stored Communications Act, §§2701–2713)(opens in a new window)
United States Code 2024 Edition
- Adopted
- 1986
- In force
- — (current codified statutory text)
- Law of the People's Republic of China on the Protection of Consumer Rights and Interests(opens in a new window)
Current version (second amendment, 2013)
- Adopted
- 1993-10-31
- In force
- 2014-03-15
- Regulations of the People's Republic of China on the Security Protection of Computer Information Systems(opens in a new window)
Current version (revised 2011)
- Adopted
- 1994-02-18
- In force
- 2011-01-08 (effective on the date the revision decision was announced; original regulations effective 1994-02-18)
- Measures for the Security Protection Administration of the International Networking of Computer Information Networks(opens in a new window)
Current version (revised 2011)
- Adopted
- Approved by the State Council on 1997-12-11; promulgated by Ministry of Public Security Order No. 33 on 1997-12-16
- In force
- 2011-01-08 (revision effective; original measures effective 1997-12-30)
- Measures for the Administration of Internet Information Services(opens in a new window)
Current version (second revision, 2024)
- Adopted
- 2000-09-25
- In force
- 2025-01-20
- Decision of the Standing Committee of the National People's Congress on Safeguarding Internet Security(opens in a new window)
Amended version of 2009 (current text)
- Adopted
- 2000-12-28
- In force
- 2009-08-27 (amendment effective)
- Regulations on the Protection of Computer Software(opens in a new window)
Current version (second revision, 2013)
- Adopted
- 2001-12-20
- In force
- 2013-03-01
- Electronic Signature Law of the People's Republic of China(opens in a new window)
Current version (second amendment, 2019)
- Adopted
- 2004-08-28
- In force
- 2019-04-23 (amendment effective; original law effective 2005-04-01)
- Decision of the Standing Committee of the National People's Congress on Strengthening the Protection of Online Information(opens in a new window)
Current version (2012, unamended)
- Adopted
- 2012-12-28
- In force
- 2012-12-28
- European Union, Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR)(opens in a new window)
Official Journal text (OJ L 119, 4.5.2016, English)
- Adopted
- 2016-04-27
- In force
- Entered into force 2016-05-24; applicable from 2018-05-25
- Cybersecurity Law of the People's Republic of China(opens in a new window)
Current version (amended 2025)
- Adopted
- 2016-11-07
- In force
- 2026-01-01
- Cryptography Law of the People's Republic of China(opens in a new window)
Current version (original 2019 version, unamended)
- Adopted
- 2019-10-26
- In force
- 2020-01-01
- Data Security Law of the People's Republic of China(opens in a new window)
Current version (original 2021 version, unamended)
- Adopted
- 2021-06-10
- In force
- 2021-09-01
- Regulations on the Security Protection of Critical Information Infrastructure(opens in a new window)
Current version (2021, unamended)
- Adopted
- 2021-07-30
- In force
- 2021-09-01
- Personal Information Protection Law of the People's Republic of China(opens in a new window)
Current version (original 2021 version, unamended)
- Adopted
- 2021-08-20
- In force
- 2021-11-01
- Provisions on the Administration of Algorithmic Recommendation of Internet Information Services(opens in a new window)
Current version (2021, unamended)
- Adopted
- 2021-12-31
- In force
- 2022-03-01
- Measures for the Security Assessment of Outbound Data Transfers(opens in a new window)
Current version (2022, unamended)
- Adopted
- 2022-07-07
- In force
- 2022-09-01
- Provisions on the Administration of Deep Synthesis of Internet Information Services(opens in a new window)
Current version (2022, unamended)
- Adopted
- 2022-11-25
- In force
- 2023-01-10
- Measures for the Standard Contract for the Outbound Transfer of Personal Information(opens in a new window)
Current version (2023, unamended)
- Adopted
- 2023-02-22
- In force
- 2023-06-01
- Interim Measures for the Administration of Generative Artificial Intelligence Services(opens in a new window)
Current version (2023, unamended)
- Adopted
- 2023-07-10
- In force
- 2023-08-15
- Amendment (XII) to the Criminal Law of the People's Republic of China(opens in a new window)
Original amendment text (2023)
- Adopted
- 2023-12-29
- In force
- 2024-03-01
- Provisions on Promoting and Regulating Cross-Border Data Flows(opens in a new window)
Current version (2024, unamended)
- Adopted
- 2024-03-22
- In force
- 2024-03-22 (effective on the date of promulgation)
- Regulations on the Administration of Network Data Security(opens in a new window)
Current version (2024, unamended)
- Adopted
- 2024-09-24
- In force
- 2025-01-01
- Measures for Labeling Artificial Intelligence-Generated and Synthetic Content(opens in a new window)
Current version (2025, unamended)
- Adopted
- 2025-03-07
- In force
- 2025-09-01
- Measures for the Certification of Outbound Transfers of Personal Information(opens in a new window)
Current version (2025, unamended)
- Adopted
- 2025-10-14
- In force
- 2026-01-01
- European Union, Regulation (EU) 2026/1744 (Digital Omnibus on AI, amending 2024/1689)(opens in a new window)
Official Journal text (OJ L 2026/1744, 2026-07-24, English)
- Adopted
- 2026-07-08
- In force
- 2026-07-27
This page shows a reading structure and is not legal advice. Formal content should note the applicable region, effective date, official source, and date last verified.