Network operators to carry out business and service activities, must comply with laws and administrative regulations, respect for social morality, comply with business ethics, honesty and credit, fulfill the obligations of network security protection, accept the supervision of the government and society, and assume social responsibility.

Construction, operation of the network or through the network to provide services, should be in accordance with the provisions of laws, administrative regulations and national standards of mandatory requirements, to take technical measures and other necessary measures to ensure network security, stable operation, effective response to network security incidents, to prevent illegal and criminal activities on the network, and to maintain the integrity of network data, confidentiality and availability.

Network-related industry organizations, in accordance with the statute, to strengthen industry self-discipline, develop a code of conduct for network security, guide members to strengthen network security protection, improve the level of network security protection, and promote the healthy development of the industry.

Expanded Information

To ensure the safety of network operation, the responsibility of the network operator as the first responsible person must be implemented. Require network operators in accordance with the requirements of the network security level protection system, to take appropriate management measures and technical precautions and other measures to fulfill the corresponding network security protection obligations.

In order to safeguard the security of critical information infrastructure, maintain national security, economic security and safeguard people's livelihood, the operational security of critical information infrastructure has been stipulated and key protection has been implemented. The scope includes basic information networks, important information systems in important industries and fields, military networks, important government networks, and commercial networks with a large number of users.

With the development and application of cloud computing, big data and other technologies, network data security is vital to safeguarding national security, economic security, protecting the legitimate rights and interests of citizens, and promoting data utilization. Network operators are required to take measures such as data classification, important data backup and encryption to prevent network data from being stolen or tampered with.

Strengthening the protection of citizens' personal information and preventing illegal access, leakage or illegal use of citizens' personal information data requires operators of critical information infrastructures to store citizens' personal information and other important data within their borders; if it is necessary to store it outside of the country or provide it outside of the country, they should carry out a security assessment in accordance with the regulations.

Baidu Encyclopedia - Draft Cybersecurity Law

Baidu Encyclopedia - Cybersecurity Law of the People's Republic of China