On December 13, 2022, the Ministry of Industry and Information Technology (MIIT) of China issued the Measures on the Administration of Data Security in the Industry and Information Technology Sector (Trial) (hereinafter referred to as “the Measures”). It will come into force on January 1, 2023.

The Measures details the requirements for data classification and grading management, data life-cycle security management, data security monitoring, early warning and emergency management, and data security testing, certification and assessment management in 42 articles spread across 8 chapters. The Measures specifies that, if required to be stored in China in accordance with the laws and administrations, the major and core data collected and produced by data processors in the field of industry and information technology in China should be stored within the territory. Data needed to be provided overseas should be subject to the security assessment of data exports in accordance with the laws and administrations.

Data processors in the field of industry and information technology shall not provide industrial and information technology data stored in the People’s Republic of China to foreign industries, telecommunications, and wireless law enforcement agencies unless approved by MIIT.

If you need more information or have any question on the information, please contact: assistant@bestao-consulting.com