Cybersecurity Standard Practice Guide — Security Guide for Individual Users Using Artificial Intelligence Services

网络安全标准实践指南——个人用户使用人工智能服务安全指南

Record CN-27 · TC260-PG-20267A

Issued by: National Cybersecurity Standardization Technical Committee (TC260) Secretariat
Jurisdiction: China
Level · region: National · East Asia
Published / adopted: 2026-08-24
Language: Chinese
Official identifier: TC260-PG-20267A

Summary

TC260 practice guide on how individual users can use AI services over the internet securely. Users should recognise AI's limits such as errors and hallucinations, avoid over-reliance and replacing real social contact, and watch for misuse such as cloned voices of relatives or forged official notices. They should use services from regular channels and generative AI built on filed large models, check agreements and permissions, protect sensitive information, cross-check outputs, treat legal, medical or financial outputs as reference only, and not induce harmful outputs, impersonate others or remove AI content labels.

Language

No English version of this instrument was found. The English title and the summary are the register's own, written from the sources below; for the exact wording use the Chinese text.

Safety topics

transparency & labellingdeepfakes & synthetic media

Status notes

Version v1.0-202608, released with notice 网安秘字〔2026〕105号 of 24 Aug 2026. It also serves as a reference for technology providers, developers and operators of AI services. Guardians of minors and elderly users are asked to help them use AI services safely. For deploying agents it refers users to TC260-PG-20266A, and for the style of content labels to chapter 5 of GB 45438-2025 (CN-08).

Sources

Open the official source https://www.tc260.org.cn/tc260/sjzn/202608/6bd7f30173444f6cae692e0e7c3045b8/files/23e68462a22b465c9aef09e584659924.pdf

Secondary source: https://www.tc260.org.cn/tc260/tzgg/202608/1586c71e2ebf4db28ed4a7651788ca87.shtml

Local copy

Archived. Last attempt 2026-10-18 00:45:34 UTC

Official source (third-party copy, not published) archive/_runs/2026-10-14-discover-leads-2026-10-14/C011/2026-10-14/official.pdf

Retrieved 2026-10-14 13:11:03 UTC

SHA-256 2b8b471b5a5aa188ab08201913a14d3ddce70a6dccf222e2d34ddb3fff39f014

Secondary source (third-party copy, not published) archive/CN-27/2026-10-18/secondary.html

Retrieved 2026-10-18 00:13:42 UTC

SHA-256 e0144b4d8633bfa7af52f420bc2f96819d5600b99f2406ae8b656799a8965bd8

Verification

Another official source, such as an announcement by the issuer, confirms the title, date and status. checked 2026-10-18 · alternative-official-url-fetched

Recheck of 18 Oct 2026. Read the guide's PDF from tc260.org.cn (version v1.0-202608; stored 14 Oct 2026, and identical when fetched again on 18 Oct 2026) and TC260's release notice 网安秘字〔2026〕105号 (tc260.org.cn, stored 18 Oct 2026 as the record's secondary source). The PDF confirms the title, the number TC260-PG-20267A, the TC260 Secretariat as issuer, the version and the contents; its cover gives only August 2026 (2026年8月), and the day, 24 Aug 2026, comes from the notice. The summary follows the Chinese text. No English version was found; the guide's statement reserves translation to the TC260 Secretariat's written authorisation.

Second check: Independent check by Claude Code (claude-sonnet-5-5), 2026-10-18: 7 field(s) supported.

History

2026-10-18verification.level: A → B — level computed from the evidence by tools/pipeline.py2026-10-18-recheck-east-asia-1 · Claude Code (claude-opus-5-5)
2026-10-14related: [{"id": "CN-08", "slug": "cn-gb-45438-2025"}] → [{"id": "CN-08", "slug": "cn-gb-45438-2025"}, {"id": "CN-26", "slug": "tc260-pg- — TC260 practice guides of one series or referring to each other, as the checker of run 2026-10-14-discover-leads-2026-10-14 named them (checks/C003.json; C011's own text refers to TC260-PG-20266A)2026-10-14-discover-leads-2026-10-14 · Claude Code (claude-opus-5-5)
2026-10-14Added to the register — found in pipeline run 2026-10-14-discover-leads-2026-10-14, candidate C011 (CN/ministries)2026-10-14-discover-leads-2026-10-14 · Claude Code (claude-opus-5-5)

TC260-PG-20266A (agent deployment and use security) China · Published (non-binding, current)

Citation

National Cybersecurity Standardization Technical Committee (TC260) Secretariat. Cybersecurity Standard Practice Guide — Security Guide for Individual Users Using Artificial Intelligence Services [TC260-PG-20267A]. 2026-08-24. https://www.tc260.org.cn/tc260/sjzn/202608/6bd7f30173444f6cae692e0e7c3045b8/files/23e68462a22b465c9aef09e584659924.pdf. Status: Published (non-binding, current); verified 2026-10-18 (level B). Local copy archive/_runs/2026-10-14-discover-leads-2026-10-14/C011/2026-10-14/official.pdf retrieved 2026-10-14 13:11:03 UTC, SHA-256 2b8b471b5a5aa188ab08201913a14d3ddce70a6dccf222e2d34ddb3fff39f014. Every AI Policy Ever, version 1.18 (snapshot 2026-10-18), record CN-27.

Improve this record

Know of an amendment, a status change or an error? Report news or an error on GitHub; the form opens with this record filled in.