China Issues Draft Measures On Data Security In The Industry And Information Technology Sectors

The Ministry of Industry and Information Technology ("MIIT"), following the first round of public comments which concluded on October 30, 2021, published a new draft of the Administrative Measures on Data Security in the Industry and Information Technology Sectors (for Trial Implementation) (draft "Measures") on February 10 for comment through February 21, 2022.¹

As one of the industry regulators specified in the Data Security Law ("DSL"), MIIT is duty-bound to refine the security management systems for data in the industry and information technology sectors ("IIT Data"). The draft Measures would specify requirements for data protection by category and classification and for the management of Important Data; define the scope of MIIT's duties and those of its local counterparts (each a "Local Regulator"); and set out the requirements for full life-cycle data security protection, all of which are reflected in the 41 articles across eight chapters of the