On 14 November 2021, the Cyberspace Administration opened a public consultation on regulations on network data security management, until 13 December 2021. The regulations outline the powers and responsibilities of government authorities in requesting, accessing and overseeing data held by private entities. The regulations introduce measures for data security supervision and inspection, applying to data processors handling personal and important data. The regulations grant authorities powers to request explanations, review security-related documents, conduct technical tests, verify data exports, and take other necessary actions under relevant laws. Data processors must cooperate by providing access to security-related data, explaining algorithms, and offering technical support. A data security audit system is also established, requiring regular compliance audits by professional institutions, with authorities overseeing audits of important data processing activities.
Original source