Before launching a website or app, complete ICP registration and retain logs for at least 6 months per classification protection requirements

16. Before launching a website or app, complete ICP registration and retain logs for at least 6 months per classification protection requirements

Cost: Registration itself is free; using a cloud provider’s process takes a few weeks. Fees for classification protection assessments vary by level. Classification protection, also known as “DB”, is a set of national security management measures that classify systems based on their importance; small websites generally do not need to undergo assessments.

In plain terms: ICP registration costs nothing, and the cloud provider’s process takes a few weeks. Domestic servers without registration will be shut down. Providers that claim registration is free but charge fees face fines ranging from 100,000 to 1,000,000 yuan. You must retain logs for at least 6 months; failure to comply or causing any consequences results in fines of 10,000 to 100,000 yuan.

Benefit: Commercial internet information services require a license, while non-commercial ones need only registration. Operating without a license or registration is prohibited. Non-compliant sites will be ordered to make corrections by telecom authorities; refusal leads to site closure. Unlicensed operators face confiscation of illegal earnings plus fines of 3 to 5 times those earnings, or fines ranging from 100,000 to 1,000,000 yuan. Failure to display the ICP registration number on a website’s homepage incurs fines of 5,000 to 50,000 yuan. Network operators must develop security policies under classification protection rules, defend against attacks, retain logs for at least 6 months, and encrypt and back up data by category. Non-compliance leads to corrective orders and warnings; persistent violations result in fines of 10,000 to 100,000 yuan for operators and 5,000 to 50,000 yuan for responsible personnel nationwide.

Evidence grade: A

Sources: State Council of China (2011). Measures for the Administration of Internet Information Services (revised in 2011, Articles 4, 19, and 22). <https://www.gov.cn/gongbao/content/2011/content_1860864.htm>; National People’s Congress Standing Committee (2025). Cybersecurity Law (revised in 2025, January 1, 2026) Effective on the same day, Articles 23 and 61; the 2016 version is Article 21 and 59). <https://www.cac.gov.cn/2025-12/29/c_1768735112911946.htm>

Notes: Domestic servers cannot be accessed via domain names without ICP registration. Details on how to register, associated penalties for missing registration numbers, and how to verify a provider’s qualifications are covered in Section 26, Item 4 (domestic servers must be registered). Common pitfalls include registering as a personal non-commercial site while actually charging fees, and failing to update registration after changing domains or operators. Keeping logs for 6 months is both a legal obligation and a safeguard; they can prove your innocence in case of incidents.