ARCHETYPAL
CGRCC / requirement

Article 17

REQ-2605f914435bf43244cb · LEGACY_INTERPRETATION · source version 691df22ed6b2af71

Covered GenAI service providers must perform required security assessments

Meaning & implementation context

Catalog material requires organizational applicability review. Reported support, approval and maturity are statements from the source, not current enforcement verification.

Source Id
cn-genai-interim
Control
Article 17
Source Version
Order 15; effective 2023-08-15
Url
https://www.cac.gov.cn/2023-07/13/c_1690898327029107.htm
Actor
Covered GenAI service providers
Modality
must
Action
perform
Object
required security assessments
Condition
Services with public-opinion attributes or social mobilization capability
Exception
Article 2 scope and cross-referenced Chinese laws apply
Timing
Not recorded
Authority
binding-within-scope
Jurisdiction
China
Checked At
2026-10-03
Status
interpretation-needs-review
Examples
{ "meetsRule": "Covered GenAI service providers performs the required action \"perform\" for required security assessments within these source conditions: Services with public-opinion attributes or social mobilization capability, and retains evidence.", "doesNotMeetRule": "Covered GenAI service providers omits the required action \"perform\" for required security assessments while those source conditions apply.", "outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match." }

Source-reported relationships

1 associations retained with their original context.

SUPPORTED BY SOURCE REQUIREMENT · AIR-0029859136@3d4d358d3575ab26

SOURCE_REPORTED_REVIEW_REQUIRED

{
  "sourceKey": "cn-genai-interim@d7fc895a372e",
  "locator": "Article 17"
}
Inspect target record ↗

Owner interpretation review

Append a catalog review decision. The source record remains immutable.

Owner sign-in

Versioned CGRCC JSON
{
  "key": "REQ-2605f914435bf43244cb@691df22ed6b2af71",
  "id": "REQ-2605f914435bf43244cb",
  "version": "691df22ed6b2af71",
  "kind": "requirement",
  "lifecycle": "LEGACY_INTERPRETATION",
  "title": "Article 17",
  "statement": "Covered GenAI service providers must perform required security assessments",
  "family": "Security",
  "body": {
    "sourceId": "cn-genai-interim",
    "control": "Article 17",
    "sourceVersion": "Order 15; effective 2023-08-15",
    "url": "https://www.cac.gov.cn/2023-07/13/c_1690898327029107.htm",
    "actor": "Covered GenAI service providers",
    "modality": "must",
    "action": "perform",
    "object": "required security assessments",
    "condition": "Services with public-opinion attributes or social mobilization capability",
    "exception": "Article 2 scope and cross-referenced Chinese laws apply",
    "timing": null,
    "authority": "binding-within-scope",
    "jurisdiction": "China",
    "checkedAt": "2026-10-03",
    "status": "interpretation-needs-review",
    "examples": {
      "meetsRule": "Covered GenAI service providers performs the required action \"perform\" for required security assessments within these source conditions: Services with public-opinion attributes or social mobilization capability, and retains evidence.",
      "doesNotMeetRule": "Covered GenAI service providers omits the required action \"perform\" for required security assessments while those source conditions apply.",
      "outOfScope": "The actor, activity, jurisdiction, or applicability conditions in this source variant do not match."
    }
  },
  "versions": [
    {
      "version": "691df22ed6b2af71",
      "key": "REQ-2605f914435bf43244cb@691df22ed6b2af71"
    }
  ],
  "provenance": [],
  "relationships": [
    {
      "id": "MAP-0e0f6b077c2cf589e1d6e4b8",
      "from": "AIR-0029859136@3d4d358d3575ab26",
      "to": "REQ-2605f914435bf43244cb@691df22ed6b2af71",
      "kind": "SUPPORTED_BY_SOURCE_REQUIREMENT",
      "status": "SOURCE_REPORTED_REVIEW_REQUIRED",
      "body": {
        "sourceKey": "cn-genai-interim@d7fc895a372e",
        "locator": "Article 17"
      },
      "fromKeys": [
        "AIR-0029859136@3d4d358d3575ab26"
      ],
      "toKeys": [
        "REQ-2605f914435bf43244cb@691df22ed6b2af71"
      ],
      "resolution": "RESOLVED_REFERENCE_REVIEW_REQUIRED"
    }
  ]
}
Back to CGRCC Registry