China Adopted a National Cryptography Law as Blockchain Policy Accelerated

China’s top legislature adopted the Cryptography Law of the People’s Republic of China on October 26, 2019, establishing a national framework for encryption technologies, products and services during a surge of official interest in blockchain development.

The Standing Committee of the 13th National People’s Congress approved the law at its 14th meeting. President Xi Jinping promulgated it through Presidential Order No. 35 on October 26. Its effective date was set for January 1, 2020, so the October 26 action completed enactment but did not make the requirements immediately operative.

The distinction between cryptography and cryptocurrency was essential. The statute governed technologies used to encrypt or authenticate information. It did not mention bitcoin, authorize token trading or establish rules for issuing digital assets. Its relevance to blockchain came from cryptography’s role in securing distributed systems and from the broader policy environment in which the vote occurred.

Three categories of cryptography

The 44-article law divided cryptography into core, common and commercial categories. Core and common cryptography were designated for protecting state-secret information and were themselves treated as state secrets subject to strict, unified administration.

Commercial cryptography covered information that was not a state secret. The law expressly permitted citizens, legal persons and other organizations to use commercial cryptography for cyber and information security in accordance with law.

That classification mattered institutionally because it separated secret government systems from a commercial market serving businesses and the public. It also gave regulators a statutory basis for standards, testing, certification, supervision and enforcement rather than treating every encryption product under one undifferentiated security regime.

A regulated commercial market

For commercial cryptography, the law combined industrial encouragement with state oversight. Article 21 supported research, development, academic exchange, technology transfer and commercial application. It called for equal treatment of domestic and foreign-invested enterprises and prohibited administrative authorities from forcing technology transfers.

The framework was not permissionless. Commercial entities remained subject to applicable technical requirements and mandatory standards. Products involving national security, public welfare or public interests could require testing and certification. Operators of critical information infrastructure could face security assessments when deploying commercial cryptography, while purchases that might affect national security were made subject to national-security review.

Article 28 also contemplated import licensing and export controls for specified commercial cryptography connected to national security, public interests or China’s international obligations. The precise controlled-product lists were to be formulated separately, leaving an important implementation question unresolved on October 26.

The law included a protection relevant to foreign technology suppliers: cryptography authorities and other departments were not permitted to demand proprietary information such as source code while exercising their commercial-cryptography functions. Officials were also required to protect business secrets and personal privacy learned through their duties.

Blockchain enthusiasm was not a crypto reversal

The vote followed a separate political signal. Xi had presided over a Communist Party Politburo study session on October 24, and official reporting published October 25 said he wanted blockchain treated as an important area for technological and industrial innovation. The stated applications included digital finance, supply chains, manufacturing, government services and data sharing.

That sequence made the cryptography law especially visible to digital-asset markets, but the two records should not be collapsed into a cryptocurrency endorsement. Xi’s remarks concerned blockchain development and oversight; the enacted law concerned cryptographic security and administration. Neither record said bitcoin had received official approval or that existing cryptocurrency policies had changed.

No market move can be attributed to the October 26 law from these records alone. The verifiable event-day conclusion is narrower: China enacted a foundational security statute while simultaneously elevating blockchain as a strategic technology, pairing support for technical development with certification, national-security review and regulatory control.