Will China's Cybersecurity Law Cast Light On Shadow IT?

With only a few months left before the enforcement of the Cybersecurity Law (CSL) on 1 June 2017, questions are multiplying on the effective scope of the CSL, on its content and on the various effects it will have on the Chinese digital economy. Most of the points of the CSL currently discussed are focusing on the definition of Critical Information Infrastructure as per Article 31, the doctrine behind the definition of personal information as per Article 76.5 or even the enforcement mechanisms of the law. However, the underlying effects of the CSL are globally uncovered and may lead to major surprise at the time of enforcement and risks of non-compliance risks for numerous companies. Today we will cover in this article the obligation set in Article 21.3 of the CSL on network monitoring and logging and its effect on Shadow IT.