[vc_row row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” padding_top=”50″ css_animation=””][vc_column][vc_column_text]<\/p>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” padding_top=”30″ css_animation=””][vc_column][vc_column_text]With the implementation of Cyber Security Law on June 1, 2017, cyber security and data protection have become the focuses of concerns for lawyers and investors in China. Relevant clarifications on Cyber Security Law are released gradually, and we hereby highlight the following newest drafts to provide an outlook for the future of legislation trend.[\/vc_column_text][\/vc_column][\/vc_row][vc_row row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”center” background_image_as_pattern=”without_pattern” padding_top=”50″ padding_bottom=”50″ css_animation=””][vc_column css=”.vc_custom_1517373139965{background-image: url(http:\/\/asiallians.com\/wp-content\/uploads\/2018\/01\/Picture1.png?id=18554) !important;}”][vc_empty_space][vc_column_text]1. Safeguarding Data Security by Newly-Drafted Measures<\/span><\/strong>[\/vc_column_text][vc_empty_space height=”70px”][\/vc_column][\/vc_row][vc_row row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” padding_bottom=”15″ css_animation=””][vc_column][vc_column_text]The Cyberspace Administration of China (\u201cCAC\u201d) has recently enacted the Draft for Comment of Administrative Measures for Data Security (the \u201cMeasures\u201d) and is consulting for the public opinion by June 28, 2019.<\/p>\n It is common nowadays that the operators of websites and applications collect personal information by forcing or misleading users to agree to the collection of personal information. Unfair competition cases caused by the commercialized using of data also occur from time to time. Some regulations in the Measures further strengthen the protection of users:<\/p>\n (1)\u00a0If the network operators are to gather the personal information of a juvenile under 14, they shall obtain consent from his guardians.<\/p>\n (2) Rules of personal information collection and usage should be enacted and publicized by network operators through websites and applications. Furthermore, those rules should be specific, simple, easy for the users to access. \u00a0In addition, personal information can only be collected by the operators when the users are aware of the collection and explicitly agree on the collection.<\/p>\n (3) The network operators cannot, on the grounds such as improving the service quality and\/or enhancing the user experience etc., force or mislead the users to accept the collection of information (e.g. through default authorization without indicating clear authorization instructions).<\/p>\n (4) For \u201cdirectional push\u201d, which refers to network operators using data and algorithms to push news and advertisements to the users, the users shall be provided with clear indication of the wording as well as the choice to stop receiving such information.<\/p>\n (5) While publishing market forecasts, statistical information, personal or enterprise\u2019 credit information through analyzing and utilizing the data resources, network operators shall not affect national security, economic operation or social stability, and shall not harm the legitimate rights and interests of others.<\/p>\n In this big data era, the Measures aim to better protect data from disclosure, theft, tampering, damage, illegal use etc. and to punish illegal activities endangering data security in accordance with the law.1<\/a><\/sup><\/p>\n (http:\/\/www.cac.gov.cn\/2019-05\/28\/c_1124546022.htm<\/a>)[\/vc_column_text][\/vc_column][\/vc_row][vc_row row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”center” background_image_as_pattern=”without_pattern” padding_top=”50″ padding_bottom=”50″ css_animation=””][vc_column css=”.vc_custom_1517373139965{background-image: url(http:\/\/asiallians.com\/wp-content\/uploads\/2018\/01\/Picture1.png?id=18554) !important;}”][vc_empty_space][vc_column_text]2. New Draft on Measures about Cybersecurity Censorship for Public Comment<\/span><\/strong>[\/vc_column_text][vc_empty_space height=”70px”][\/vc_column][\/vc_row][vc_row row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” padding_bottom=”15″ css_animation=””][vc_column][vc_column_text]The CAC also plans to launch measures about cybersecurity censorship. It has recently drawn up the Measures for Cybersecurity Review (Draft for Comment) (the \u201cDraft for Comment\u201d) to solicit public opinions by June 24, 2019. The Draft for Comment stipulates that upon promulgation, it will replace the previous trial version of the Measures for the Security Review of Network Products and Services2<\/a><\/sup>\u00a0which came into force in June 1, 2017.<\/p>\n Pursuant to article 35 and 65 of PRC Cyber Security Law, when purchasing network products and services, business operators of Key Information Infrastructure (\u201cKII\u201d)3<\/a><\/sup>\u00a0shall go through a security review if such network products or service may influence national security, otherwise, a fine equivalent to up to 10 times of the purchase price will be imposed, and the person in charge will be fined amounting up to RMB 100,000.00. The Draft for Comment only regulates the activities of KII operators in purchasing network products and services. Specifically, when purchasing products and services, the Draft for Comment stipulates that the KII operators shall:<\/p>\n (1) foresee the potential safety risks that may arise after the launching of certain network products or services;<\/p>\n (2) notify the cybersecurity review office when the launch is likely to result in the complete shutdown of KII of major functions.<\/p>\n In addition, the Draft for Comment expressly states the documentary and procedural steps of security review to be filed by the KII operators, which were not mentioned in the previous regulations.<\/p>\n It is stipulated that the KII operators shall submit a notification statement, a safety risk report and other relevant materials. And then the cybersecurity review office shall complete the preliminary review within 30 working days from accepting the cybersecurity review, and the time limit could be extended by 15 working days if the situation is complicated. Furthermore, the Draft for Comment states that the review may end up with three results, including \u201cpass\u201d, \u201cpass with condition\u201d, and \u201cfailed\u201d.<\/p>\n Regulations on KII have raised great concerns among foreign investors since they may need to disclose sensitive information within the frame of the relevant review procedures. Details are yet to be further issued.<\/p>\n (http:\/\/www.moj.gov.cn\/news\/content\/2019-05\/24\/zlk_235516.html<\/a>)[\/vc_column_text][\/vc_column][\/vc_row][vc_row row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”center” background_image_as_pattern=”without_pattern” padding_top=”50″ padding_bottom=”50″ css_animation=””][vc_column css=”.vc_custom_1517373139965{background-image: url(http:\/\/asiallians.com\/wp-content\/uploads\/2018\/01\/Picture1.png?id=18554) !important;}”][vc_empty_space][vc_column_text]3. Chinese Lawmakers Deliberate to Further Secure Personal Information in the Civil Code Draft<\/span><\/strong>[\/vc_column_text][vc_empty_space height=”70px”][\/vc_column][\/vc_row][vc_row row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” padding_bottom=”100″ css_animation=””][vc_column][vc_column_text]Not only the cyber law area is facing improvement, the Civil Code is also undergoing a significant change of further protection on personal information. In April 20, 2019, the Standing Committee of the National People\u2019s Congress released the Second Draft for Review of the Part on Real Right and on Personality Right of Civil Code (\u201cDraft for Review\u201d) for public consultation. A highlight has been on setting up a separate part of personality right in the Civil Code in order to protect citizens\u2019 rights in the basic law.<\/p>\n (1) \u201cChanging faces through AI technology\u201d<\/p>\n It concerns a technology based on artificial intelligence that uses a combination of existing and videos\/photos to create a false video\/photo. Such video\/photo will normally mislead public as the individual in such false video\/photo performs activities that never occurred in reality. More severely, the false video\/photo can be used to commit online frauds. The Draft for Review adds strict prohibitions on \u201cchanging faces through AI\u201d in which article 799 clarifies that no individual or entity can infringe upon others\u2019 portrait rights by defaming, fouling, or faking through means of information technology.4<\/a><\/sup>\u00a0In addition, the Draft for Review also stipulates that portraits shall not be produced, used, or made public without the portrait owner\u2019s consent, unless otherwise provided for by law (e.g. ordered to be published by police).<\/p>\n (2) Strengthening protection of personal information of juveniles<\/p>\n In addition, protection of personal information of juveniles is strengthened in the Draft for Review. For example, when collecting and using personal information of persons without or with limited civil capacity, the individual or entity shall seek the consent of their guardians first, unless otherwise stipulated by law. This new regulation especially protects the juveniles who are mentally immature and whose privacy and personal information are very vulnerable to be used and infringed.<\/p>\n (3) Strengthening confidentiality obligations of government department and its officials<\/p>\n Additionally, the Draft for Review emphasizes the obligation of confidentiality for the state organs and their officials.<\/p>\n If personal privacy and information have to be used while performing duties, the government department or its officials shall not reveal such personal information, nor illegally disclose it to others.<\/p>\n These amendments are in line with the relevant provisions of the General Principles of Civil Law, while also providing the legal basis for the next step of enacting the law on personal information protection. Along with the two drafts on cyber security, it can be seen that China has been putting efforts to safeguard citizens\u2019 personal information and also to secure data security.<\/p>\n (http:\/\/www.npc.gov.cn\/npc\/lfzt\/rlyw\/node_35174.htm)<\/p>\n 1.<\/a>\u00a0 https:\/\/baijiahao.baidu.com\/s?id=1634780621445710924&wfr=spider&for=pc<\/a><\/p>\n 2.<\/a>\u00a0http:\/\/www.cac.gov.cn\/2017-05\/02\/m_1120904567.htm<\/a><\/p>\n 3.<\/a>\u00a0KII is introduced in article 31 of Cyber Security Law which stipulates that \u201cthe State shall carry out important protection of the important industries and fields, such as public communication and information service, energy, transportation, irrigation, finance, public services and e-government affairs, and the key information infrastructures that may endanger national security and public interest in case of damage, data leakage, etc. The specific scope and measures for security protection for KII shall be formulated by the State Council.<\/p>\n 4.<\/a>\u00a0https:\/\/mp.weixin.qq.com\/s\/DnSfjv4_QufJfgMcPyQDew<\/a><\/p>\n <\/p>\n <\/p>\n
\n