China Monthly Data Protection Update - October 2022

Legislation

NISTC Solicits Comments on National Standard Information Security Technology Cybersecurity Information Reporting Guide (Draft for Comments)

On September 28, 2022, the National Information Security Standardization Technical Committee ("NISTC") issued the Information Security Technology Cybersecurity Information Reporting Guide (Draft for Comments) ("Guide") to solicit public opinion. The Guide intends to stipulate that when reporting cybersecurity threat information, it is necessary to report the discovery time and the threat intelligence, etc., while the recipient may request the reporting party to provide the measures it has taken against the threat, follow-up plans, as well as the situation of potentially affected assets and the consequences of harm.¹