China's Data Protection or Cyber Security Laws and Regulations

Common Problems

Common Problems

  • What is Cybersecurity Law? What does it regulate?

    Cybersecurity Law is China's basic law in the cyber security field. It stipulates the obligations of network operators and network product and service providers, and security requirements for critical information infrastructure. This law came into effect on June 1, 2017.

    The Cybersecurity Law applies to the construction, operation, maintenance, use of networks, as well as the supervision and administration of cybersecurity within the territory of the People's Republic of China.

  • What is Personal Information Protection Law? What does it regulate?

    The Personal Information Protection Law is China's special legislation in the field of personal data protection. It stipulates the rules for processing personal information, transferring personal information across borders, and the rights of the data subjects. The law came into effect on November 1, 2021.

    The Personal Information Protection Law regulates processing activities of personal information of natural persons in the Chinese mainland. It applies to processing activities carried out in the Chinese mainland, as well as processing activities outside the Chinese mainland.

  • What is Data Security Law? What does it regulate?

    The Data Security Law is a basic law in China in the data security field. It stipulates data classification, data protection, data security review, and security obligations of data processors. The law came into effect on September 1, 2021.

    The Data Security Law applies to data processing activities carried out in the Chinese mainland, as well as data processing activities outside Chinese mainland under specific conditions.

  • What is Personal Information Security Specification? What does it regulate?

    The Personal Information Security Specification defines China's important guidelines for protecting personal information. It regulates data controller processing activities, including data collection, storage, use, sharing, transfer, and disclosure.

    The Personal Information Security Specification is applicable to the regulation of personal information processing activities of organizations of all kinds, and also applicable to the supervision, management, and evaluation of personal information processing activities by organizations such as regulators and third-party assessment agencies.

  • Where is my content data stored?

    Huawei Cloud has deployed many data centers around the world, including Asia, Europe, and America. Data centers in each region are physically isolated. If you have special requirements for geographical locations, there are numerous Huawei Cloud regions to choose from. Huawei Cloud will not transfer your content data to other regions without your explicit consent or unless required by legal obligations.

    If you need Huawei Cloud's assistance in cross-border transfer of content data that contains personal data, contact and authorize Huawei Cloud. Huawei Cloud will transfer the data in accordance with your authorization requirements.

  • As a customer of Huawei Cloud, what are my responsibilities for data protection or cyber security in accordance with China's major laws, regulations, and regulatory requirements?

    Since you have full control over your content data, you should correctly identify personal data on the cloud, use appropriate services, and develop security and personal data protection policies to ensure personal data security. In addition, you can use any of the multiple privacy protection services provided by Huawei Cloud to strengthen personal data protection.

  • How does Huawei Cloud help me comply with China's major legal and regulatory requirements related to data protection or cyber security?

    Huawei Cloud has conducted an in-depth analysis of China's major laws, regulations, and regulatory requirements on data protection or cyber security. We will help you understand what roles you and Huawei Cloud have in the cloud service model and what regulatory requirements you need to meet. In addition, we will provide a wide range of services to help you meet privacy protection requirements.