AI Governance Institute logo
AI Governance Institute

Intelligence for Compliance and GRC Teams

← News
Research2026-05-31

China's Anthropomorphic AI Rules Take Effect July 2026, Setting New Bar for Companion and Interaction Services

What happened

The Cyberspace Administration of China published the Interim Measures for Anthropomorphic AI Services on April 10, 2026, establishing a finalized regulatory framework effective July 15, 2026. The measures apply to services that simulate human-like interaction through AI, including virtual companions, virtual relatives, and emotionally responsive AI personas. Obligations include mandatory disclosure to users that they are interacting with an artificial system, governance over AI-generated content produced within interaction flows, and technical and operational safeguards designed to prevent psychological dependency or harmful emotional influence. Separate and more restrictive provisions apply when such services are offered to minors, effectively prohibiting or severely limiting virtual companion and virtual relative products in that demographic. Operators must also comply with existing Chinese algorithm filing requirements, situating these measures within China's layered AI regulatory stack that already includes the Generative AI Interim Measures, Deep Synthesis Regulations, and Algorithm Recommendation Regulations.

Why it matters

  • ·Regulatory exposure is immediate and layered: organizations operating anthropomorphic AI products in China must comply by July 15, 2026, and non-compliance sits at the intersection of three existing regulatory regimes covering algorithms, deep synthesis, and generative AI, meaning enforcement scrutiny is likely to be coordinated and cumulative.
  • ·The minor-protection provisions create a product-level compliance gate, not merely a disclosure obligation: services that include virtual companion or virtual relative features must either exclude minors categorically or demonstrate compliance with restrictions, requiring age-verification infrastructure and product design controls that many current offerings lack.
  • ·The psychological influence and addiction safeguard requirements are novel in their operational specificity, obligating compliance teams to design and document technical controls against behavioral manipulation that go beyond existing content moderation frameworks and have no direct analog in Western AI regulation yet.

Governance controls affected

What to do now

  • Audit all AI products offered in China to identify any service that simulates human-like interaction, emotional responsiveness, or persona-based engagement, and map each against the anthropomorphic AI definition in the CAC measures.
  • Review product eligibility for minor users: determine whether any in-scope service includes virtual companion or virtual relative features and initiate a product decision process on restriction, age-gating, or redesign before the July 15, 2026 effective date.
  • Verify that user-facing disclosure mechanisms clearly and prominently identify the service as artificial at the point of interaction, and document these controls in your AI model registry and product compliance files.
  • Design and implement technical safeguards against addictive design patterns and harmful psychological influence, including interaction time limits, emotional escalation detection, and crisis referral pathways, with documented testing evidence.
  • Confirm that algorithm filing obligations with the CAC are current for all in-scope services, given that these measures sit alongside and cross-reference the existing algorithm recommendation and generative AI regulatory regimes.

What to watch next

Compliance teams should monitor CAC enforcement guidance and any implementing rules issued between now and July 15, 2026, particularly on how the psychological harm and addiction safeguard requirements will be assessed technically. The CAC's broader Draft AI Law, currently moving through the legislative process, may expand or supersede elements of these interim measures, and teams should track whether the National People's Congress advances that legislation before year-end. China's approach to minor protection in AI services is increasingly influencing regulatory discussions in the EU and South Korea, so organizations with global operations should watch for convergence in the design of similar safeguard requirements across jurisdictions.

Stay ahead of stories like this

Get every China AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Powered by Buttondown.

Related Coverage

Research2026-08-19

EU AI Act Enforcement Has Begun: Documentation Gaps Now Draw Regulator Attention

The Future of Life Institute's EU AI Act Newsletter #108 reports that enforcement activity under the EU AI Act is now underway, shifting the regulation from a planning horizon to an active compliance obligation. The newsletter tracks emerging enforcement patterns and flags documentation and transparency obligations as the most immediate areas of exposure. Compliance teams operating in EU-regulated markets should use enforcement signals to stress-test existing control mappings and update their conformity assessment processes.

Research2026-08-21

Encrypted Prompts Defeat AI Guardrails in Grok and Gemini

Researchers at Adversa AI have identified a technique called Cryptographic Context Injection that conceals malicious instructions as ciphertext to bypass content safety filters in Grok and Gemini. The attack works because safety filters evaluate the text classification of a prompt without executing it, allowing ciphertext to pass through undetected and then decrypt within a trusted execution environment. Enterprise compliance teams relying on vendor-side guardrails as a primary control for content filtering and agentic workflow safety should treat this finding as a structural gap, not an edge case.

Research2026-08-20

Kriminal Sells Guardrail Bypass for $12.99, Voiding Vendor-Control Assumptions

ThreatDown researchers have identified a clearnet criminal AI service called Kriminal that wraps jailbreak prompts around legitimate models including xAI Grok, Anthropic Claude, Mistral, and Llama 3.3 to resell uncensored capabilities starting at $12.99 per month. The service offers exploit development, OSINT, social engineering, and unrestricted code generation through named agent personas. The finding demonstrates that provider-level safety controls can be systematically circumvented at commodity cost, directly undermining compliance programs that treat upstream guardrails as a primary control.