Complete the required ICP filing before releasing a website or app, and retain at least six months of logs under classified-protection rules
Filing is free and takes weeks. The source states that mainland-hosted domains cannot resolve without it and that refusal to correct can close a site. Failure to show the filing number on the homepage carries RMB 5,000–50,000. Operating a paid service under a noncommercial filing can bring RMB 100,000–1 million. Keep logs for at least 6 months; failure to correct or resulting consequences can bring RMB 10,000–100,000.
What it takes
Chinese ICP filing is free and usually takes a few weeks through a cloud provider. Classified cybersecurity assessments charge according to level. This is China's system of security-management obligations based on system importance; small sites generally do not need a formal assessment.
What you may gain
Commercial internet information services need a permit; noncommercial services need filing. Unlicensed or unfiled provision is prohibited. Failure to file brings a correction order and, upon refusal, website closure. Unlicensed commercial operation brings confiscation of proceeds and a fine of 3–5 times proceeds, or RMB 100,000–1 million. Omitting the filing number from the homepage carries RMB 5,000–50,000. Network operators must implement classified-protection security-management systems, prevent attacks, retain network logs for at least 6 months, and classify, back up and encrypt data. Failure brings correction orders and warnings; refusal or harmful consequences bring RMB 10,000–100,000, plus RMB 5,000–50,000 for responsible managers. These are nationwide Chinese requirements.
Context & considerations
The source states that domains on mainland servers cannot resolve without filing. Common traps are charging through a personal noncommercial filing, or changing the domain or operator without updating it. Six months of logs are both an obligation and potentially useful evidence that an incident was not your doing.
Research & references
State Council of China (2011). Measures for the Administration of Internet Information Services, 2011 revision, Articles 4, 19 and 22. https://www.gov.cn/gongbao/content/2011/content_1860864.htm; NPC Standing Committee (2025). Cybersecurity Law, 2025 revision effective January 1, 2026, Articles 23 and 61; formerly Articles 21 and 59. https://www.cac.gov.cn/2025-12/29/c_1768735112911946.htm