Every AI Policy Ever · open in the interactive register

Published (non-binding, current)Non-binding · Guidelines / framework

Cybersecurity Standard Practice Guide — Artificial Intelligence Application Security Guidelines: Health

网络安全标准实践指南——人工智能应用安全指引 卫生健康

Record CN-22 · TC260-PG-202610A

Issued by
National Cybersecurity Standardization Technical Committee (TC260) Secretariat
Jurisdiction
China
Level · region
National · East Asia
Published / adopted
2026-09-15
Language
Chinese
Official identifier
TC260-PG-202610A

Summary

Health guide in TC260's AI application security guidelines, for medical and health institutions and technology providers, used with the general part (TC260-PG-20268A). Doctors stay the decision-makers: AI diagnostic and treatment suggestions need a doctor's confirmation, patients must know of AI involvement and may refuse it, and applications need ethics committee review and filing with health authorities. It covers the life cycle and scenarios such as clinical decision support, triage (stopping the chat on emergency signs), public health warning and drug trials, and annexes a five-level risk grading.

Language

No English version of this instrument was found. The English title and the summary are the register's own, written from the sources below; for the exact wording use the Chinese text.

Safety topics

risk-based classificationhuman oversightaccountability & liability

Status notes

Version v1.0-202609, released on 15 Sept 2026 with notice 网安秘字〔2026〕118号 together with the general provisions and the education and audiovisual guides. The guide sets rules for dividing liability between doctors and AI when a system gives a wrong suggestion, and asks that systems be checked for performance across population subgroups; where performance drops markedly for groups such as children or the elderly, use in that group is to be restricted or the lower confidence clearly flagged. The informative annex grades AI applications in health as especially major, major, significant, general or low risk; the top grade has catastrophic and systemic features, and the annex refers to AI Safety Governance Framework 2.0 (CN-13) for grading. Normative references include GB/T 45654 (CN-10), GB 45438 (CN-08), GB/T 45674 (CN-24) and TC260-005, AI Application Ethics Security Guidelines 1.0. Drafting units include the National Health Commission's Statistical Information Center.

Sources

Open the official source https://www.tc260.org.cn/tc260/tzgg/202609/ec149159dcb246268eda751eee89967d/files/%E3%80%8A%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A0%87%E5%87%86%E5%AE%9E%E8%B7%B5%E6%8C%87%E5%8D%97%E2%80%94%E2%80%94%E4%BA%BA%E5%B7%A5%E6%99%BA%E8%83%BD%E5%BA%94%E7%94%A8%E5%AE%89%E5%85%A8%E6%8C%87%E5%BC%95%20%E5%8D%AB%E7%94%9F%E5%81%A5%E5%BA%B7%E3%80%8B.pdf.pdf

Secondary source: https://www.tc260.org.cn/tc260/tzgg/202609/ec149159dcb246268eda751eee89967d.shtml

Local copy

Archived. Last attempt 2026-10-18 00:45:16 UTC

Official source (third-party copy, not published) archive/_runs/2026-10-14-discover-leads-2026-10-14/C005/2026-10-14/official.pdf
Retrieved 2026-10-14 13:10:35 UTC
SHA-256 d397731291af8d543a9bfb43d3b816402b0267853141592de27127736ba4e241
Secondary source (third-party copy, not published) archive/CN-22/2026-10-18/secondary.html
Retrieved 2026-10-18 00:13:18 UTC
SHA-256 4a4ebaf020f64af32513a71722d21882ded18e56f5fa643ecc4f82506ccf39b0

Verification

B
Another official source, such as an announcement by the issuer, confirms the title, date and status. checked 2026-10-18 · alternative-official-url-fetched
Recheck of 18 Oct 2026. Read the guide's PDF from tc260.org.cn (version v1.0-202609; stored 14 Oct 2026, and identical when fetched again on 18 Oct 2026) and TC260's release notice 网安秘字〔2026〕118号 (tc260.org.cn, stored 18 Oct 2026 as the record's secondary source). The PDF confirms the title, the number TC260-PG-202610A, the TC260 Secretariat as issuer, the version and the contents; its cover gives only September 2026 (2026年09月), and the day, 15 Sept 2026, comes from the notice, which also lists this guide among the four it releases. The summary follows the Chinese text. No English version was found; the guide's statement reserves translation to the TC260 Secretariat's written authorisation.
Second check: Independent check by Claude Code (claude-sonnet-5-5), 2026-10-18: 7 field(s) supported.

History

  1. 2026-10-18verification.level: A → B — level computed from the evidence by tools/pipeline.py2026-10-18-recheck-east-asia-1 · Claude Code (claude-opus-5-5)
  2. 2026-10-18notes: Version v1.0-202609, released on 15 Sept 2026 with notice 网安秘字〔2026〕118号 togethe → Version v1.0-202609, released on 15 Sept 2026 with notice 网安秘字〔2026〕118号 togethe — added the normative references, among them GB/T 45674 (CN-24), with record IDs; the rule on subgroups now gives both options of clause 7.2 b) (restricted use or a clear warning of lower confidence) instead of restricted use alone2026-10-18-recheck-east-asia-1 · Claude Code (claude-opus-5-5)
  3. 2026-10-18related: [{"id": "CN-10", "slug": "cn-gb-t-45654-2025"}, {"id": "CN-08", "slug": "cn-gb-4 → [{"id": "CN-10", "slug": "cn-gb-t-45654-2025"}, {"id": "CN-08", "slug": "cn-gb-4 — added CN-24 (GB/T 45674), a normative reference of the guide2026-10-18-recheck-east-asia-1 · Claude Code (claude-opus-5-5)
  4. 2026-10-14related: [{"id": "CN-10", "slug": "cn-gb-t-45654-2025"}, {"id": "CN-08", "slug": "cn-gb-4 → [{"id": "CN-10", "slug": "cn-gb-t-45654-2025"}, {"id": "CN-08", "slug": "cn-gb-4 — TC260 practice guides of one series or referring to each other, as the checker of run 2026-10-14-discover-leads-2026-10-14 named them (checks/C003.json; C011's own text refers to TC260-PG-20266A)2026-10-14-discover-leads-2026-10-14 · Claude Code (claude-opus-5-5)
  5. 2026-10-14Added to the register — found in pipeline run 2026-10-14-discover-leads-2026-10-14, candidate C005 (CN/ministries)2026-10-14-discover-leads-2026-10-14 · Claude Code (claude-opus-5-5)

Related records

GB/T 45654-2025 China · Published (non-binding, current)

GB 45438-2025 (AI content labeling standard) China · In force

AI Safety Governance Framework 2.0 China · Superseded

TC260-PG-20268A (AI application security, general provisions) China · Published (non-binding, current)

TC260-PG-20269A (AI application security, education) China · Published (non-binding, current)

TC260-PG-202611A (AI application security, radio, TV and network audiovisual) China · Published (non-binding, current)

GB/T 45674-2025 China · Published (non-binding, current)

Citation

National Cybersecurity Standardization Technical Committee (TC260) Secretariat. Cybersecurity Standard Practice Guide — Artificial Intelligence Application Security Guidelines: Health [TC260-PG-202610A]. 2026-09-15. https://www.tc260.org.cn/tc260/tzgg/202609/ec149159dcb246268eda751eee89967d/files/%E3%80%8A%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E6%A0%87%E5%87%86%E5%AE%9E%E8%B7%B5%E6%8C%87%E5%8D%97%E2%80%94%E2%80%94%E4%BA%BA%E5%B7%A5%E6%99%BA%E8%83%BD%E5%BA%94%E7%94%A8%E5%AE%89%E5%85%A8%E6%8C%87%E5%BC%95%20%E5%8D%AB%E7%94%9F%E5%81%A5%E5%BA%B7%E3%80%8B.pdf.pdf. Status: Published (non-binding, current); verified 2026-10-18 (level B). Local copy archive/_runs/2026-10-14-discover-leads-2026-10-14/C005/2026-10-14/official.pdf retrieved 2026-10-14 13:10:35 UTC, SHA-256 d397731291af8d543a9bfb43d3b816402b0267853141592de27127736ba4e241. Every AI Policy Ever, version 1.18 (snapshot 2026-10-18), record CN-22.

Improve this record

Know of an amendment, a status change or an error? Report news or an error on GitHub; the form opens with this record filled in.