Reporting of cyber security incidents

China regulates the reporting of cyber security incidents in a new law, which is now available in draft form. A key aspect is the reporting obligation for companies that set up or operate networks in China or provide services via networks. Particular attention is paid to the different reporting channels for central bodies, critical infrastructures… Continue reading Reporting of cyber security incidents

Violation of data protection: RMB 50 million fine

On September 6, 2023, after a 14-month review, the Cyberspace Administration of China (CAC) announced that the private platform China National Knowledge Infrastructure (CNKI) was fined RMB 50 million for the unlawful processing of personal data. CNKI is one of the leading academic platforms, digital learning platforms and knowledge bases in China, and its main operators… Continue reading Violation of data protection: RMB 50 million fine

Cybersecurity Law: Fines Significantly Increased

The Cybersecurity Law (CSL), China’s first fundamental law to comprehensively regulate cybersecurity issues, is about to undergo its first revision. A key feature of the proposed amendments is a significant increase in penalties for network operators and critical infrastructure operators that fail to comply with relevant cybersecurity protection obligations. For example, the fine range for… Continue reading Cybersecurity Law: Fines Significantly Increased