services to users of deep synthesis services whose identity information has not been verified to be real.
Article 10 Providers of deep synthesis services shall enhance content management for deep synthesis and
adopt technical or manual methods to review the data input and synthesis results generated by users of
deep synthesis services.
Providers of deep synthesis services shall establish and improve the database of features used to identify
illegal and harmful information, improve the database entry standards, rules and procedures, and record and
retain relevant network logs.
When discovering illegal or harmful information, providers of deep synthesis services shall take disposition
measures in accordance with the law, keep the related records, report the case to cyberspace authorities and
relevant authorities in a timely manner; and adopt disposition manners as required by law and as agreed,
such as warning, function restriction, service suspension, or account shutdown against the relevant user of
deep synthesis services.
Article 11 Providers of deep synthesis services shall establish and improve the mechanism to refute rumors,
and when discovering any false information produced, reproduced, released or distributed using deep
synthesis services, promptly take measures to refute the rumor, retain the related records, and report the
case to cyberspace authorities and relevant authorities.
Article 12 Providers of deep synthesis services shall provide convenient access for users to file complaints
and the public to submit complaints and tip-offs, disclose the handling procedure and feedback timeframe,
and accept and handle cases and provide feedback on the handling results in a timely manner.
Article 13 Internet application stores and other application distribution platforms shall perform
pre-admission review, routine management, emergency response and other security management
responsibilities, and verify the security assessment, registration and other information of deep synthesis
applications, and when discovering a violation of relevant national regulations, promptly take disposition
measures such as refusal to admission, warning, service suspension or removal from store.
Chapter III Data and Technology Management Standards
Article 14 Providers of deep synthesis services and providers of technical support for deep synthesis services
shall enhance the management of training data and take necessary measures to ensure the security of
training data. If any training data contains personal information, the regulation relating to the protection of
personal information shall be complied with.
If providers of deep synthesis services and providers of technical support for deep synthesis services provide
a function that edits face, voice or other biometric information, they shall prompt the users of their deep
synthesis services to inform, as required by law, the individual whose information is to be edited and obtain
the individual’s specific consent.
Article 15 Providers of deep synthesis services and providers of technical support for deep synthesis services
shall enhance technical management, and review, evaluate and validate the mechanism and logic of their
generative or synthetic algorithms on a regular basis.
Providers of deep synthesis services and providers of technical support for deep synthesis services who
provide any model, template or other tool with the following functions shall, as required by law, have a
security assessment performed by themselves or by a professional institution
(1) generating or editing face, voice or other biometric information; or
(2) generating or editing any special object, scene or other non-biometric information that may involve
national security, national image, national interests or social and public interests.
Article 16 Providers of deep synthesis services shall take technical measures to add labels that do not affect
3