China: Adopted Announcement on Carrying out Data Security Management Certification

On 5 June 2022, the Chinese Cyberspace Administration adopted the implementation rules of the data security management certification. In the announcement, the administration encouraged network operators to use certification systems when handling data, to improve data security when data is stored or handled. According to the rules, the certification process includes technical verifications and an on-site audit. After conducting a comprehensive evaluation, the certification body evaluates the applicants and decides on whether to issue the certification certificate. The certification lasts for three years and can be maintained by complying with post-certification supervision.