Hi all,
Not sure if anyone has much expertise in the upcoming China Cybersecurity Law with effect in the end of May 2018. There are many classifications for businesses who do businesses in China.
Its best to consult a Legal Officer based in China. My current organization is classified as a Network Operator, but bear in mind, it does not mean you are a network service provider there. It means that you have servers and network connectivity out of China.
Some of the items that I am aware of is that if you are classified as a network operator, you would need to host/have a copy of your China employee PII Details in China, Network Monitoring logs of up till 6 months stored in a server hosted in your China office/datacenter and same for your Cybersecurity Monitoring logs for your China Offices network operations.
A China born breed CSO would need to be appointed to report any breaches as well. The China Cybersecurity Law is classified as a criminal law and the CSO can be arrested and a maximum fine of up till 1million RMB will be imposed on the Organization.
Wondering if there are others alike with me facing challenges like this and how do you tackle these Challenges?
