Chinese companies and bosses to face major fines over cybersecurity incidents

China is advancing amendments to its Cybersecurity Law that would mandate certification of technology products, restrict untrusted tools in critical information infrastructure, and sharply increase organizational and personal penalties—including for use of overseas cloud services—while experts argue the changes blend cybersecurity with information control, reinforce state sovereignty over internet traffic, and advance Beijing’s efforts to shape global technology standards, raising compliance and operational risks for companies operating in or with China.