Cyberspace Administration of China, Measures on Cybersecurity Reviews (Draft for Comments)

国家互联网信息办公室网络安全审查办法 (征求意见稿)

June 07, 2019 | BY

Susan Mok

CAC lists the conditions when a cybersecurity review is required

Share:

Issued: May 21, 2019

Main contents: When a critical information infrastructure operator procures network products and services, it shall anticipate the potential security risks that the products and services could pose when brought online and are operating, and produce a security risk report. Where any of the following circumstances could arise, it shall file for a cybersecurity review with the cybersecurity review office:

(1) the entirety of the critical information infrastructure ceases to operate or its major functions fail to operate normally;

(2) a large quantity of personal information