The Cybersecurity Review Measures entered into force on 1 June 2020.
There are 22 articles in total. The Measures aim to supervise whether the purchase of network products and services by critical information infrastructure operators (hereinafter referred to as “operators”) affects the national security. The key points of the Measures include:
If the purchase of network products and services by operators affects or may affect the national security, operators shall report to the network security review office affiliated to the Cyberspace Administration of China for the network security review.
The network products or services include computers, servers, storage devices, databases, software and cloud services.
The network security review office will review the following risks: whether the facilities using such products or services will be damaged; whether the data will be leaked; whether the supply channel of such products or services is safe and stable; whether the supplier of such products or services complies with Chinese laws.