Compliance Obligations under the Cybersecurity Law of China and How to Manage the Compliance Risks   BACKGROUND Since the implementation of Csybersecurity Law of the People's Republic of China ( "Cybersecurity Law" or "the Law") on June 1, 2017, a series of related supporting measures, including Regulations for the Security Protection of Critical Information Infrastructure (Consultation Paper) ("Regulations for Protection") and Measures for Security Assessment for Cross-border Transfer of Personal Information (Consultation Paper) ("Measures for Assessment"), were publicized in succession. The promulgation of these regulations imposes higher requirements on business operators in terms of cybersecurity compliance. All enterprises in China shall, in light of their own conditions, promptly formulate or update their internal cybersecurity systems and implement cybersecurity compliance work. We analyzed the related legal framework of Cybersecurity Law and put forward some practical suggestions to help enterprises better understand their compliance obligations according to the related implementation rules.   PDF LINK   1.What kinds of enterprises does the Cybersecurity Law apply to? 2.What compliance obligations do network operators have? 3.What are the special compliance obligations of CIIO? 4.Comparison of compliance obligations between ordinary network operators and CIIO 5.Suggestions for enterprises   For further information contact:   Sharon Shi Shin Feng Senior Partner Associate sharonshi@allbrightlaw.com shin.feng@allbrightlaw.com

AllBright Law Offices Contact details: Tel: +86 21 2051 1000； Fax: +86 21 2051 1999； Address: 9, 11, 12/F, Shanghai Tower No.501, Yincheng Middle Road, Pudong New Area Shanghai 200120 P. R. China； Website： www.allbrightlaw.com     ©AllBright Law Offices 2019. All rights reserved.  Confidentiality: This e-mail and its attachments are intended solely for the person to whom they are addressed, are strictly confidential and may contain privileged information. If they have come to you in error you must not copy or show them to anyone; please reply to this e-mail and highlight the error to the sender and then immediately delete the message. Unless expressly agreed in writing, AllBright Law Offices accepts no liability to persons other than clients of the firm in respect of the contents of emails or attachments.