This pre-registered report tries to investigate whether and how cybersecurity legislation affects corporate AI adoption. Drawing on textual analysis to construct firm-level AI adoption measures, we are going to use the implementation of the Cybersecurity Law as a quasi-natural experiment and conduct a difference-in-differences (DID) analysis. We further explore potential mechanisms, including cost driven channel, risk mitigation channel, and managerial adaptation channel. We also assess heterogeneity across firm characteristics and regional law enforcement. This study contributes to the emerging literature on the institutional determinants of AI adoption and offers new insights into how data governance frameworks shape firm-level technology decisions in emerging economies.