On the 13th, the Ministry of Industry and Information Technology officially issued the Measures for the Management of Data Security in the Field of Industry and Informatization (Trial). According to the Administrative Measures, important data and core data collected and generated by data processors in the field of industry and informatization in People’s Republic of China (PRC) should be stored in China if there are domestic storage requirements in laws and administrative regulations. If it is really necessary to provide them overseas, the data exit safety assessment should be conducted according to laws and regulations.
According to relevant laws and international treaties and agreements concluded or acceded to by People’s Republic of China (PRC), or according to the principle of equality and reciprocity, the Ministry of Industry and Information Technology handles the requests of foreign industrial, telecommunications and radio law enforcement agencies for providing data in the field of industry and informatization. Without the approval of the Ministry of Industry and Information Technology, data processors in the field of industry and information technology may not provide foreign law enforcement agencies of industry, telecommunications and radio with data stored in People’s Republic of China (PRC).
Based on the general principle of data classification protection, the Administrative Measures require general data to strengthen the whole life cycle security management, important data to be protected on the basis of general data protection, and core data to be protected more strictly on the basis of important data protection. For different levels of data being processed at the same time and it is difficult to take protection measures separately, the principle of "just high" shall be adopted and the protection shall be implemented according to the requirements of the highest level.
Transfer from: CCTV news client
]