Before launching a website or app, complete ICP registration and retain logs for at least 6 months per classification protection requirements

ICP registration costs nothing, and the cloud provider’s process takes a few weeks. Domestic servers without registration will be shut down. Providers that claim registration is free but charge fees face fines ranging from 100,000 to 1,000,000 yuan. You must retain logs for at least 6 months; failure to comply or causing any consequences results in fines of 10,000 to 100,000 yuan.

Registration itself is free; using a cloud provider’s process takes a few weeks. Fees for classification protection assessments vary by level. Classification protection, also known as “DB”, is a set of national security management measures that classify systems based on their importance; small websites generally do not need to undergo assessments.

Commercial internet information services require a license, while non-commercial ones need only registration. Operating without a license or registration is prohibited. Non-compliant sites will be ordered to make corrections by telecom authorities; refusal leads to site closure. Unlicensed operators face confiscation of illegal earnings plus fines of 3 to 5 times those earnings, or fines ranging from 100,000 to 1,000,000 yuan. Failure to display the ICP registration number on a website’s homepage incurs fines of 5,000 to 50,000 yuan. Network operators must develop security policies under classification protection rules, defend against attacks, retain logs for at least 6 months, and encrypt and back up data by category. Non-compliance leads to corrective orders and warnings; persistent violations result in fines of 10,000 to 100,000 yuan for operators and 5,000 to 50,000 yuan for responsible personnel nationwide.

Domestic servers cannot be accessed via domain names without ICP registration. Details on how to register, associated penalties for missing registration numbers, and how to verify a provider’s qualifications are covered in Section 26, Item 4 (domestic servers must be registered). Common pitfalls include registering as a personal non-commercial site while actually charging fees, and failing to update registration after changing domains or operators. Keeping logs for 6 months is both a legal obligation and a safeguard; they can prove your innocence in case of incidents.

国务院 (2011). 互联网信息服务管理办法（2011 年修订，第四、十九、二十二条）. https://www.gov.cn/gongbao/content/2011/content_1860864.htm；全国人大常委会 (2025). 网络安全法（2025 年修正，2026 年 1 月 1 日施行，第二十三、六十一条；2016 年文本为第二十一、五十九条）. https://www.cac.gov.cn/2025-12/29/c_1768735112911946.htm