China’s VPN providers face harsher punishment for scaling the Great Firewall under new data regulation
- The Cyberspace Administration of China drafts detailed new rules prohibiting the provision of tools for accessing censored overseas websites
- The regulation marks the country’s strictest attempt so far to clamp down on unauthorised VPN services

Titled “Network Data Security Management Regulations”, the proposal by the Cyberspace Administration of China stipulates that no individual or organisation shall provide “programs, tools, routes” or services, including internet access, server hosting, technical support, promotion, app downloads, payment and settlement for “penetrating and bypassing the cross-border data security gateway”.
Any violation may result in a fine no more than 10 times the amount of money made from the offence, or up to 500,000 yuan (US$78,362) if the offender is in a management position. Any offending organisation may have its business license revoked.
The regulation, which is expected to pass without much challenge, raises fresh questions for multinational companies operating in China, many of which rely on VPNs or similar services to reach overseas headquarters, or access websites blocked by the country’s censorship apparatus, such as Google, Facebook and most major English-language news sites.
While China’s telecommunication regulator allows certain big multinational companies to apply for special permission to leap over the Great Firewall, the approval threshold is high, forcing the great majority of individuals and businesses to rely on VPN services operating in grey areas.