China will implement a series of new cybersecurity rules next year, authorities said September 30, emphasizing national security and requiring companies providing generative artificial intelligence services to add additional protection data.
The regulations on network data security management contain 64 clauses based on China’s cybersecurity and data security laws. They will come into force on January 1.
China has been working on this document since the initial version was published almost three years ago.
Under the new rules, companies that provide services related to generative AI must improve their training in data processing and other areas. They are also required to take steps to prepare for data breach risks. Non-Chinese operators must establish data processing centers in China if they process personal data originating from the country.
Under the general provisions, subcontractors found to have harmed China’s national security, public interest or legally protected interests will be held legally responsible. This applies regardless of whether the data is processed in China or abroad.
The regulations call on businesses to follow the ruling party’s directives and adopt a broad view of national security that covers the economy, science and technology, in addition to national defense.
Companies and others involved in data processing are required to comply with national standards and report to authorities within 24 hours in the event of a data breach or other issues that could compromise national security. The rules also allow national security officials to launch investigations.
Under the new rules, the state will encourage platforms to require personalized internet identification from users before allowing them to access online services. A proposal to establish these cyberspace identifiers was drawn up by the government in July.
The proposal has sparked concerns that it could lead to tighter control of internet use. The mention of cyberspace identifiers in the new regulations suggests that the government intends to promote this measure.
From 2017 to 2021, the Chinese government developed three laws governing the Internet. It strengthens the rules regarding the transfer of data abroad.
This article first appeared on Nikkei Asia. It has been republished here as part of 36Kr’s ongoing work. partnership with Nikkei.
