“Cybersecurity Review” Takes Shape in China

The background to the Draft Measures is that the Cyber Security Law requires that network products and services purchased by operators of “critical information infrastructure” (the definition of which is somewhat vague and unsatisfactory) must undergo national security review (“Security Review”) if such network products and services “might potentially have an impact on national security,” failing which such operators risk being ordered to discontinue use and/or being subject to quite stiff fines.

The Draft Measures bring China one step closer to implementing such Security Review regime.  How this regime will look has been a major area of concern for foreign investors, especially due to concerns that the new Security Review process might be skewed in favour of “local” manufacturers and thus become a back door means of imposing essentially protectionist policies.

China’s proposed Security Review regime potentially impacts both (1) the businesses who are manufacturers of network products and providers of network services, as well as (2) the users, or prospective users, of such products and services.  While the Draft Measures give some shape to the process of Security Review, as drafted they leave a number of critical questions unanswered.

Click here for our full briefing on the Draft Measures.  Our in-house unofficial English translation of the Draft Measures is available free-of-charge upon request.  Please reach out to Mark Parsons or your normal contact at our firm for a copy.

Authored by Mark Parsons