China Releases Official Regulations On Network Data Security

On 30 September 2024, the finalized, binding version of theRegulations on Network Data Security("NDS Regulations") was released by China's State Council; it will be implemented from 1 January 2025. Nearly three years since the draft was first released to widespread attention, the finalized NDS Regulations now officially reiterate the data protection obligations imposed under China's existing cybersecurity framework, including theCybersecurity Law("CSL"), theData Security Law("DSL"), thePersonal Information Protection Law("PIPL"), and various implementing rules and regulations regarding cross-border data transfers. The NDS Regulations also provide some additional forms of specific guidance, detailed requirements, and clarifications on China's existing cybersecurity framework. This Newsletter focuses on such additional content, and how the NDS Regulations supplement and clarify China's existing cybersecurity/data regime.