Cybersecurity

Security assessment of cloud computing services for critical information infrastructure is specified

Critical information infrastructure may require the use of commercial cryptography

The National Negative List relaxes foreign investment in mining, telecommunications, utilities, cinemas and water transport

Consent of guardians is required for collection of children's personal data

A change in the legal environment of the personal data receiving country will trigger a new security assessment

CAC lists the conditions when a cybersecurity review is required

Push advertising should offer online users the option to refuse receipt of information

China's latest draft measures should better regulate data protection and cybersecurity, but they could also result in the exclusion of some foreign firms.

China's internet regulator releases a draft of data protection law for public consultation; regulators take over Baoshang Bank due to serious credit risk exposure; and CSRC vice chair Yan Qingmin pushes for tougher penalties.