Now on Demand Ransomware Resilience & Recovery Summit - All Sessions Available
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

China Passes Controversial Cybersecurity Law

China Monday passed a controversial cybersecurity bill tightening restrictions on online freedom of speech and imposing new rules on online service providers, raising concerns it is further cloistering its heavily controlled internet.

China Monday passed a controversial cybersecurity bill tightening restrictions on online freedom of speech and imposing new rules on online service providers, raising concerns it is further cloistering its heavily controlled internet.

The ruling Communist Party oversees a vast censorship system — dubbed the Great Firewall — that aggressively blocks sites or snuffs out internet content and commentary on topics considered sensitive, such as Beijing’s human rights record and criticism of the government.

China Cyber CensorshipAnd it has aggressively blocked major companies such as Google and Facebook from offering their services in its domestic cyber space.

The law, which was approved by the National People’s Congress Standing Committee, is largely focused on protecting the country’s networks and private user information.

But it also bans internet users from publishing a wide variety of information, including anything that damages “national honour”, “disturbs economic or social order” or is aimed at “overthrowing the socialist system”.

A provision requiring companies to verify a user’s identity effectively makes it illegal to go online anonymously.

And companies providing online services in the country must provide “technical support and help” to public security organs investigating “crimes” — which would normally include those related to speech.  

Barriers to trade

The legislation drew a wave of criticism from rights groups and foreign business organisations, who said its vague language and overreaching security requirements would restrict freedom of speech and throw up barriers to global companies hoping to serve China’s enormous market of more than 710 million Internet users.

Advertisement. Scroll to continue reading.

“This dangerous law commandeers internet companies to be de facto agents of the state, by requiring them to censor and provide personal data to the authorities at a whim,” said Patrick Poon, China researcher at global rights group Amnesty International.

James Zimmerman, chairman of the American Chamber of Commerce in China, said the law risks China “becoming isolated technologically from the rest of the world”.

“Requirements for national security reviews and data sharing will unnecessarily weaken security and potentially expose personal information,” he wrote in a statement, adding that overall the new law “creates barriers to trade and innovation”.

Concerns about the legislation were overblown, Zhao Zeliang, the director of China’s Cyberspace Administration, told reporters.

The law is not intended “to limit foreign technology or products or to put up trade barriers”, he said.

“A few foreign friends, they equate ‘security controls, voluntary controls, security trustworthiness’ with trade protectionism,” he said, adding “that’s a type of misunderstanding. A type of prejudice.”

China’s foreign ministry spokesman Lu Kang said there were “no significant differences” between the new Chinese laws and laws of other countries”, adding that the law had involved a lengthy public comment period, making it “more transparent than other governments in this regard”.

The European Chamber of Commerce disagreed, saying in a statement that the “overall lack of transparency over the last year surrounding this significant and wide-reaching piece of legislation has created a great deal of uncertainty and negativity in the business environment”.

Amnesty’s Poon said the law “goes further than ever before in codifying abusive practices, with a near-total disregard for the rights to freedom of expression and privacy.”

Chinese authorities have long reserved the right to control and censor online content. The country stepped up controls in 2013, launching a wide-ranging internet crackdown.

Hundreds of Chinese bloggers and journalists were detained as part of the campaign, which has seen influential critics of Beijing paraded on state television.

Under regulations announced at the time, Chinese internet users face three years in prison for writing defamatory messages that are re-posted 500 times or more. They can also be jailed if offending posts are viewed more than 5,000 times.

Comments posted on social media have been used in the prosecution of various activists, such as human rights lawyer Pu Zhiqiang.

“If online speech and privacy are a bellwether of Beijing’s attitude toward peaceful criticism, everyone -– including netizens in China and major international corporations -– is now at risk,” said Sophie Richardson, China Director of Human Rights Watch.

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

MSSP Dataprise has appointed Nima Khamooshi as Vice President of Cybersecurity.

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

Professional services company Slalom has appointed Christopher Burger as its first CISO.

More People On The Move

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.