CSL-China Cybersecurity Law, Link of Government Website-Chinese Version.

中华人民共和国网络安全法-中共中央网络安全和信息化委员会办公室 (cac.gov.cn)

Cyber ​​Security Law of the People’s Republic of China

(Adopted at the 24th meeting of the Standing Committee of the Twelfth National People’s Congress on November 7, 2016)

　　Table of contents

　　Chapter 1 General Provisions

　　Chapter II Network Security Support and Promotion

　　Chapter III Network Operation Security

　　Section 1 General Provisions

　　Section 2 Operational Security of Critical Information Infrastructure

　　Chapter IV Network Information Security

　　Chapter V Monitoring, Early Warning and Emergency Response

　　Chapter VI Legal Responsibilities

　　Chapter VII Supplementary Provisions

　　Chapter 1 General Provisions

　　Article 1 This Law is enacted for the purpose of safeguarding network security, safeguarding cyberspace sovereignty, national security, and public interests, protecting the legitimate rights and interests of citizens, legal persons, and other organizations, and promoting the healthy development of economic and social informatization.

　　Article 2 This Law applies to the construction, operation, maintenance and use of networks within the territory of the People’s Republic of China, as well as the supervision and management of network security.

　　Article 3 The state adheres to the principle of equal emphasis on network security and informatization development, follows the principles of active use, scientific development, management according to law, and security assurance, promotes network infrastructure construction and interconnection, encourages network technology innovation and application, and supports the training of network security talents, Establish a sound network security guarantee system and improve network security protection capabilities.

　　Article 4 The state formulates and continuously improves network security strategies, clarifies the basic requirements and main objectives for ensuring network security, and proposes network security policies, work tasks, and measures in key areas.

　　Article 5 The state takes measures to monitor, defend against, and deal with network security risks and threats originating within and outside the territory of the People’s Republic of China, protect key information infrastructure from attacks, intrusions, interference, and destruction, punish illegal and criminal activities on the Internet in accordance with the law, and safeguard network security. Space security and order.

　　Article 6 The state advocates honest, trustworthy, healthy and civilized online behavior, promotes the dissemination of socialist core values, takes measures to raise the awareness and level of network security in the whole society, and creates a good environment for the whole society to participate in promoting network security.

　　Article 7 The state shall actively carry out international exchanges and cooperation in cyberspace governance, network technology research and development, standard formulation, and combating cybercrime, to promote the construction of a peaceful, secure, open, and cooperative cyberspace, and to establish a multilateral, democratic, and transparent network. governance system.

　　Article 8 The national network information department is responsible for overall planning and coordination of network security work and related supervision and management work. The telecommunications department under the State Council, the public security department, and other relevant organs are responsible for network security protection, supervision and management within their respective responsibilities in accordance with this Law and the provisions of relevant laws and administrative regulations.

　　The network security protection, supervision and management responsibilities of the relevant departments of the local people’s government at or above the county level shall be determined in accordance with relevant state regulations.

　　Article 9 Network operators carrying out business and service activities must abide by laws and administrative regulations, respect social morality, abide by business ethics, be honest and trustworthy, perform network security protection obligations, accept government and social supervision, and assume social responsibilities.

　　Article 10 To construct and operate a network or provide services through the network, technical measures and other necessary measures shall be taken in accordance with the provisions of laws and administrative regulations and the mandatory requirements of national standards to ensure network security and stable operation, and effectively respond to network security incidents. Prevent network illegal and criminal activities, and maintain the integrity, confidentiality and availability of network data.

　　Article 11 Network-related industry organizations shall strengthen industry self-discipline, formulate codes of conduct for network security, guide members to strengthen network security protection, improve the level of network security protection, and promote the healthy development of the industry in accordance with the charter.

　　Article 12 The state protects the rights of citizens, legal persons, and other organizations to use the Internet in accordance with the law, promotes the popularization of Internet access, improves the level of Internet services, provides the society with safe and convenient Internet services, and guarantees the lawful, orderly and free flow of Internet information.

　　Any individual or organization using the Internet shall abide by the Constitution and laws, abide by public order, respect social morality, must not endanger network security, must not use the network to engage in activities that endanger national security, honor and interests, incite subversion of state power, overthrow of the socialist system, incitement to split the country, Undermining national unity, promoting terrorism, extremism, promoting ethnic hatred and ethnic discrimination, disseminating violence, obscenity and pornography, fabricating and disseminating false information to disrupt economic and social order, and infringing on others’ reputation, privacy, intellectual property rights and other legitimate rights and interests and other activities.

　　Article 13 The state supports the research and development of network products and services that are conducive to the healthy growth of minors, punishes the use of the network to engage in activities that endanger the physical and mental health of minors, and provides minors with a safe and healthy network environment.

　　Article 14 Any individual or organization has the right to report behaviors that endanger network security to the departments of network information, telecommunications, and public security. The department that receives the report shall deal with it in a timely manner in accordance with the law; if it is not within the responsibility of the department, it shall be transferred to the department that has the authority to handle it in a timely manner.

　　Relevant departments shall keep confidential the relevant information of whistleblowers and protect the lawful rights and interests of whistleblowers.

　　Chapter II Network Security Support and Promotion

　　Article 15: The state establishes and improves a network security standard system. The standardization administrative department of the State Council and other relevant departments of the State Council shall, according to their respective responsibilities, organize the formulation and timely revision of national standards and industry standards related to network security management, network products, services, and operational security.

　　The state supports enterprises, research institutions, institutions of higher learning, and network-related industry organizations to participate in the formulation of national and industry standards for network security.

　　Article 16 The State Council and the people’s governments of provinces, autonomous regions, and municipalities directly under the Central Government shall make overall plans, increase investment, support key network security technology industries and projects, support the research, development and application of network security technologies, and promote safe and reliable network products and services, Protect the intellectual property rights of network technology, and support enterprises, research institutions, and colleges and universities to participate in national network security technology innovation projects.

　　Article 17 The state promotes the establishment of a network security socialized service system, and encourages relevant enterprises and institutions to provide security services such as network security certification, testing, and risk assessment.

　　Article 18 The state encourages the development of network data security protection and utilization technologies, promotes the opening of public data resources, and promotes technological innovation and economic and social development.

　　The state supports the innovation of network security management methods, and the use of new network technologies to improve the level of network security protection.

　　Article 19 People’s governments at all levels and their relevant departments shall organize and carry out regular network security publicity and education, and guide and supervise relevant units to do a good job in network security publicity and education.

　　The mass media should conduct cybersecurity publicity and education to the society in a targeted manner.

　　Article 20: The state supports enterprises, institutions of higher learning, vocational schools, and other education and training institutions to carry out cybersecurity-related education and training, adopt various methods to train cybersecurity talents, and promote the exchange of cybersecurity talents.