The Measures for Network Security Review, revised by 13 departments, including the Cyberspace Administration of China and the National Development and Reform Commission, came into effect today (15th).
Li Xueying, member of the National Information Security Standardization Technical Committee: The revised Measures not only increase the number of network platform operators, but also add a number of data security-related provisions, attaching greater importance to data security, covering a wider range of objects, and more quantitative review indicators.
Experts said that the Measures include situations such as network platform operators carrying out data processing activities that affect or may affect national security into network security reviews, and make it clear that network platform operators who have more than 1 million users' personal information must apply to the Network Security Review Office for network security review when going public abroad.
Fan Yuan, member of the Standing Committee of the Security Committee of the China Computer Society: There may be three situations in which a network security review is declared: First, there is no need for review; second, after initiating the review, those whose national security is not affected by the study may continue to go abroad for listing procedures; third, after initiating the review, those who have been judged to affect national security are not allowed to go to foreign listing.
The Measures require that where critical information infrastructure operators purchase network products and services, they shall prejudge the national security risks that may be brought about by the products and services after they are put into use. Where it affects or may affect national security, a network security review shall be reported to the Network Security Review Office.
Huang Min, member of the National Information Security Standardization Technical Committee: Data security has become an important part of national security, and it is necessary to focus on preventing the risk of critical information infrastructure, core data, important data or a large amount of personal information being affected, controlled, and maliciously used by foreign governments, as well as the harm of supply interruption to the continuity of national critical information infrastructure such as energy, transportation, water conservancy, and national defense science and technology.
Source: CCTV news client