China Cybersecurity Law

Hong who led the drafters of the 2018 specification argues that this text is stricter than the u s but not as much as the eu.

China cybersecurity law. Notwithstanding the enhanced individual protections that it provides the law primarily serves to increase the state s ability to control domestic internet activity. China s cybersecurity law is the latest legislation on data protection and privacy in china. China s first comprehensive regulation for digital privacy and security cybersecurity law csl was passed on november 7th 2016 and first came into effect on june 1 st of 2017. China discourages transferring data out of the country by creating required conditions also found in article 37 of the cybersecurity law which requires an entity to conduct security assessments and obtain approval from local cybersecurity authorities before it can transfer data out of the country.

The cybersecurity law is a milestone for cybersecurity legislation in mainland china and serves as a basic law in its field. With the official promulgation china s data protection legislation is entering into a new stage. The cyber security law of the people s republic of china commonly referred to as the china internet security law was enacted to increase data protection data localization and cybersecurity in the interest of national security. The language of the article lacks any detail.

The law is an evolution of the previously existent cybersecurity rules and regulations from various levels and fields assimilating them to create a structured law at the macro level. Since then there has been sporadic enforcement of certain sections of the law while others are being dealt with less consistently. The cybersecurity law of the people s republic of china was adopted at the 24th session of the standing committee of the 12th national people s congress on 7 november with 154 affirmative votes and one abstention. When the cybersecurity law takes effect on june 1 internet companies operating in china will be subject to a broad and ill defined array of regulations and potential punishments.

The prc s cybersecurity law along with its subsequent specification and other regulations compels companies to implement broad sets of progressive cyber hygiene measures the strictness of which increases with the sensitivity of the information handled by said companies in the cyberspace. The cybersecurity law draft for second deliberation was released on the national people s congress website for public comment.