Network security and data in 2021: collection of new compliance review articles (215 pages)

2021 It is undoubtedly a milestone in the history of data compliance and privacy protection in China —— China has officially ushered in two pieces of exclusive legislation in the field of personal information protection and data security , namely 《 Personal information protection law of the people's Republic of China 》（2021 year 9 month 1 In force on ） And 《 Data security law of the people's Republic of China 》（2021 year 11 month 1 In force on ）.

These two laws are related to 2017 Officially implemented in 《 Network security law of the people's Republic of China 》 It has jointly constructed the basic legal framework for data compliance and privacy protection in China , For network security 、 Data security and personal information protection put forward directional and basic guidelines and regulatory requirements .

With the promulgation and formal implementation of the two new upper laws , Horizontal level , All legislative branches 、 The implementation requirements of the regulatory authorities have been issued continuously ; Vertically , Each vertical sub industry 、 The regulations in the field are constantly evolving , Compared with the past, the specification requirements of all links in the data life cycle , Also to a more detailed level of development . Such as 2021 year 7 month 30 The State Council announced 《 Key information infrastructure security regulations 》;2021 year 8 month 16 The national Internet Information Office jointly issued the 《 Several regulations on vehicle data security management （ On a trial basis ）》;2021 year 9 month 27 The people's Bank of China issued 《 Measures for the administration of credit reference business 》.

Besides , A number of regulations and national standards with landing significance , It is actively soliciting opinions from the public and is expected to release it in the near future . Such as 2021 year 1 month 8 Japan 《 Internet Information Services （ Draft for comments ）》 Ask the public for advice ;2021 year 10 month 29 Japan's national Internet Information Office released 《 Measures for data exit security assessment （ Solicitation draft ）》.

these , To some extent, it indicates that the legislation in the field of data compliance and privacy protection is gradually establishing the internal logic , And the regulatory requirements are becoming more and more clear , And can effectively guide the status and trend of landing practice .

In this year , With the introduction of data compliance laws and regulations , The industry pays more attention to personal information and data protection , Some enterprises began to spontaneously put forward super standard internal compliance requirements . Based on this , We have written several review articles on the hot new regulations , This report integrates 2021 Articles published in , With a view to providing valuable reference for enterprises in data compliance practice .

Excerpts from the report are as follows ：

【 Report sorting 】 official account 《 Xia said 》; Xiashuo think tank official website ：www.guotaixia.com