CAC Draft Rules Target Human-Like AI Services, Triggering New Security Assessment and Content Governance Obligations for China Market Operators

What happened

Why it matters

• ·Regulatory exposure: Multinational companies deploying any AI product in China that simulates human interaction, including customer-facing chatbots or virtual assistants, may fall within scope and face mandatory security assessments, ethics reviews, and registration obligations before or shortly after the rules take effect.
• ·Operational impact: The requirement to establish standing ethics review processes, emergency response procedures, and fraud prevention controls for affected AI services creates new internal governance infrastructure that cannot be built quickly, making early gap assessment critical for organizations already operating in this space.
• ·Organizational risk: The draft's breadth in defining anthropomorphic AI is deliberately wide, meaning product and legal teams that have not mapped their China-deployed AI services against this framework risk misclassifying products as out-of-scope, creating latent compliance exposure as enforcement begins.

Governance controls affected

What to do now

• ☐Inventory all AI products and features deployed or marketed in China that involve simulated personality, emotional response, or human-like conversational interaction, and flag each against the draft's scope definitions.
• ☐Assess whether any flagged services meet the draft's threshold criteria (large user base, national security sensitivity) that would trigger mandatory CAC security assessment filing obligations.
• ☐Review existing content moderation, fraud prevention, and data security controls for China-facing AI services against the draft's enumerated control categories and document gaps for remediation.
• ☐Assign ownership for standing ethics review of anthropomorphic AI services in China and draft a committee charter or equivalent governance structure in anticipation of the final rule.
• ☐Monitor the CAC comment period and track whether a July 15, 2026 effective date is confirmed in the final text, and build that date into your regulatory calendar and project timelines.

What to watch next

Compliance teams should track the close of the CAC public comment period and watch for a finalized version of the Interim Measures, paying close attention to whether the rumored July 15, 2026 effective date is confirmed, as that would give operators a very short runway for implementation. The CAC's enforcement posture under its existing Generative AI Interim Measures and Deep Synthesis Regulations will provide a leading indicator of how aggressively it intends to pursue non-compliant anthropomorphic AI services. Teams should also monitor China's broader draft AI Law, which is still moving through legislative review, to understand how the anthropomorphic AI rules will nest within that overarching framework.