China has reached a pivotal milestone in its digital governance strategy by releasing a comprehensive draft of its first dedicated Law on Countering Cyberviolence. This legislative move represents the culmination of a multi-year effort to expand the legal system’s capacity to address the growing prevalence of online harassment, doxing, and coordinated digital attacks. The draft law, which was made available for public comment through August 28, 2026, seeks to integrate and formalize several years of fragmented normative documents into a single, cohesive statutory framework. By involving a broad array of government departments—including those responsible for education, telecommunications, and civil affairs—the Chinese government signals a shift toward a holistic, societal approach to digital safety.
The Evolution of the Cyberviolence Legal Framework
The draft Law on Countering Cyberviolence does not emerge in a vacuum but is the product of a structured, iterative regulatory process that began in earnest in 2022. To understand the current draft, it is essential to trace the chronology of the normative documents that laid its foundation.
In November 2022, the Cyberspace Administration of China (CAC) issued the "Notice on Effectively Strengthening the Governance of Cyberviolence." This was the first official authority specifically dedicated to the issue. Its primary focus was on the obligations of online platforms. It mandated that service providers develop early-warning systems, establish mechanisms for victim protection, and implement stricter content moderation to prevent the viral spread of harassing material.

Following the CAC’s initiative, the leading justice sector authorities—the Supreme People’s Court (SPC), the Supreme People’s Procuratorate (SPP), and the Ministry of Public Security (MPS)—released the "Guiding Opinions on Punishing Cyberviolence Violations and Crimes in Accordance with Law" in 2023. These opinions provided the necessary legal teeth, describing how existing criminal charges, such as defamation, insult, and the infringement of personal information, should be applied specifically within the context of the internet.
By June 2024, the scope of regulation expanded further with the "Provisions on the Governance of Cyberviolence Information." Jointly released by the CAC, the MPS, the Ministry of Culture and Tourism, and the State Administration of Radio and Television, these provisions moved beyond judicial penalties and platform responsibilities. They introduced a broader societal mandate, emphasizing the role of traditional media, cultural institutions, and administrative oversight in curbing the culture of online vitriol.
The 2026 draft law integrates these prior documents while expanding the mandate to include the Ministry of Education and the Ministry of Civil Affairs. This expansion acknowledges that cyberviolence often originates in or impacts specific social environments, such as schools or vulnerable community groups, necessitating a preventive approach that starts offline.
Defining Cyberviolence Under the New Statute
A central challenge for legislators has been providing a precise legal definition for "cyberviolence" that distinguishes between legitimate public discourse and prohibited harassment. The draft law maintains consistency with earlier regulations but adds specific qualifiers to ensure the law targets the most harmful behaviors.

According to Article 2 of the draft, cyberviolence is defined by conduct that results in injury to an individual’s privacy or "personality rights," which include reputation, honor, likeness, and dignity. Crucially, the draft emphasizes that for conduct to rise to the level of cyberviolence, it should generally be "concentrated" or "continuous," highlighting a focus on the scale and duration of the harassment rather than isolated incidents.
The draft law categorizes prohibited conduct into four primary areas:
- The dissemination of illegal or harmful information that targets a specific individual’s reputation or dignity.
- The unauthorized disclosure of private information (doxing) with the intent to cause harm.
- Coordinated "pile-on" attacks where multiple users are mobilized to harass a single target.
- The use of deepfake technology or other AI-generated content to create "revenge porn" or defamatory imagery.
Prohibited Conduct and the Role of Assistance
The draft law places significant emphasis on the mechanisms through which cyberviolence scales. Article 31 explicitly forbids activities designed to ramp up the intensity of an attack. This includes the hiring of "professional troll armies" (water armies), the use of automated bots to amplify harassing hashtags, and the intentional manipulation of algorithms to ensure that defamatory content remains in the public eye.
Furthermore, Article 32 addresses the "ecosystem" of cyberviolence by prohibiting the knowing assistance of perpetrators. Under this provision, third-party service providers or individuals can be held liable if they provide:

- Technical Support: Providing server space, bandwidth, or specialized software used to conduct doxing or automated harassment.
- Financial Support: Funding coordinated smear campaigns or paying for the promotion of harmful content.
- Platform Services: Knowingly allowing a platform to be used as a staging ground for coordinated attacks without taking corrective action.
This "assistance" clause is designed to dismantle the financial and technical incentives that currently make professionalized online harassment a viable business model in some sectors of the digital economy.
Data and Social Context: The Impetus for Reform
The push for a dedicated Cyberviolence Law is driven by the sheer scale of China’s internet population and the rising frequency of high-profile tragedies linked to online bullying. As of 2024, China’s internet user base exceeded 1.09 billion people. This massive connectivity has facilitated rapid communication but has also created an environment where "human flesh searches" (doxing) and viral shaming can destroy a person’s life within hours.
According to data released by the Supreme People’s Procuratorate in 2023, the number of prosecutions related to "insult and defamation" in the digital sphere saw a year-on-year increase of over 10%. Furthermore, several high-profile cases involving the suicide of victims following coordinated online harassment campaigns catalyzed public demand for more stringent legal protections. These incidents underscored a gap in the legal system: while platforms could delete posts, and police could arrest individuals for specific crimes, there was no unified "Cyberviolence Law" to address the systemic nature of these attacks.
Multi-Departmental Governance and Educational Integration
One of the most notable additions in the 2026 draft is the formal involvement of the education and civil affairs sectors. Article 4 and subsequent sections outline a proactive role for schools and universities. Educational institutions will be required to establish "cyber-safety" curricula and create internal reporting mechanisms for students who are victims of digital bullying.

The Ministry of Civil Affairs is tasked with providing social support and psychological counseling services for victims. This recognizes that the damage of cyberviolence is not merely legal or digital but deeply psychological. By mandating that telecommunications departments also play a role, the law ensures that the technical infrastructure—such as mobile networks and ISPs—can be utilized to track the origins of malicious coordinated attacks more effectively.
Analysis of Implications and Legal Challenges
While the draft law is a significant step forward, legal analysts note that it presents certain complexities. Unlike the 2022 Notice or the 2023 Guiding Opinions, which were highly granular regarding specific platform obligations and criminal charges, the 2026 draft law is broader and more principle-based.
One potential challenge lies in the "notice and take down" requirements. Platforms must balance the need to act quickly against the risk of over-censorship. The draft law requires platforms to implement "real-time monitoring" for potential cyberviolence, a task that increasingly relies on Artificial Intelligence. The accuracy of these AI tools in distinguishing between heated political or social debate and actual harassment remains a point of technical and legal contention.
Furthermore, the "continuous" or "concentrated" requirement in the definition of cyberviolence serves as a high threshold. While this prevents the law from being used to stifle minor disagreements, it may also mean that victims of "one-off" but devastatingly viral incidents might find it harder to seek recourse under this specific statute compared to general defamation laws.

Official Responses and Global Context
The Cyberspace Administration of China has stated that the goal of the law is to "purify the online environment" and protect the legitimate rights of citizens in the digital age. Officials have emphasized that the law is not intended to limit freedom of speech but to ensure that the internet remains a space for "rational and civilized" exchange.
Internationally, China’s move reflects a global trend toward holding platforms and individuals more accountable for digital conduct. Similar legislative efforts have been seen in the European Union with the Digital Services Act (DSA) and in various Commonwealth jurisdictions. However, China’s approach is unique in its high level of departmental integration and its specific focus on "water armies" and coordinated commercialized harassment.
Conclusion
The draft Law on Countering Cyberviolence marks a transition from reactive regulation to a proactive, comprehensive legal regime. By consolidating the responsibilities of platforms, the judiciary, and societal institutions like schools, China aims to create a multi-layered defense against digital harassment. As the public comment period concludes and the law moves toward final ratification, its success will depend on the balance between rigorous enforcement and the preservation of a dynamic, albeit civil, digital public square. The final version of the law is expected to set a new precedent for how the world’s largest internet population is governed in the face of evolving digital threats.







