On 10th July, 2021, China's central Internet regulator, the
Cyberspace Administration of China
("CAC"), released a draft of revising
the Cybersecurity Review Measures to solicit public
comments. Existing Cybersecurity Review Measures were
promulgated on 13th April, 2020 and went into effect on 1st June,
2020 (hereafter as the "2020 rules"). The 2020 rules were
made to implement China's Cybersecurity Law and aimed
at addressing only the risks to national security and business
continuity posed by the procurement of network products and
services by critical information infrastructure operators. But
enforcement actions under the 2020 rules have never been taken, or
disclosed, until on 2nd July, 2021 China's top ride-hailing
platform Didi Chuxing was announced to be probed for cybersecurity
review two days after its IPO in the U.S., closely followed by two
similar probes against other Internet companies that were also
US-listed very recently.
