The Ministry of Industry and Information Technology has issued the measures for the Management of data Security in the Field of Industry and Information Technology (for trial implementation), and the exit of core data shall be subject to security assessme
Thank you, Mr. Air, a netizen of CTOnews.com, for your clue delivery! CTOnews.com news on December 14, the Ministry of Industry and Information Technology recently issued the measures for the Management of data Security in the Field of Industry and Information Technology (for trial implementation), which makes it clear that important data and core data collected and generated by data processors in the industrial and information fields within the territory of the people's Republic of China shall be stored in China if there are domestic storage requirements in laws or administrative regulations, and those that really need to be provided abroad Data exit safety assessment shall be carried out in accordance with the law.
The measures for the Administration of data Security in the Field of Industry and Information Technology (for trial implementation) was released yesterday CTOnews.com learned that the Ministry of Industry and Information Technology handles requests from foreign industrial, telecommunications and radio law enforcement agencies to provide data in industrial and information fields in accordance with relevant laws and international treaties and agreements concluded or acceded to by the people's Republic of China, or in accordance with the principle of equality and reciprocity. Without the approval of the Ministry of Industry and Information Technology, data processors in the industrial and information fields shall not provide data in the industrial and information fields stored within the territory of the people's Republic of China to foreign industrial, telecommunications and radio law enforcement agencies.
The "measures" consists of eight chapters and 42 articles, in addition to general principles, supervision and inspection, legal liability and supplementary provisions, detailed requirements are made for data classification and hierarchical management, data life cycle safety management, data safety monitoring, early warning and emergency management, data security testing, certification, and evaluation management. These measures will come into effect on January 1, 2023.
