On 1 January 2023 new regulations came into effect which
standardise the data security measures applicable to industry and
information technology data. The Administrative Measures for
Data Security for Industry and Information Technology Data
(Measures) follow on from the Data Security
Law (DSL, which came into effect on 1
September 2021) which passed responsibility for data security
supervision within the industry and telecommunications sector to
the Ministry of Industry and Information Technology
(MIIT).
The Measures, introduced by MIIT, frame the fundamentals of the
data security regulatory system, providing clarity on the scope of
application, as well as the security measures to be taken by data
controllers in the industry and information technology sector.
