Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Privacy

China Tightens Control Over Company Data With Transfer Rules

Companies in China would need government approval to transfer important data abroad under proposed rules announced Friday that would tighten Beijing’s control over information and might disrupt operations for international corporations.

Companies in China would need government approval to transfer important data abroad under proposed rules announced Friday that would tighten Beijing’s control over information and might disrupt operations for international corporations.

The measure is needed to protect the Chinese public and “safeguard national security,” the Cyberspace Administration of China said.

President Xi Jinping’s government sees information about China’s 1.4 billion people as a potential security risk in private hands. It has issued a flurry of rules tightening control over how companies gather and handle information.

A crackdown on data security launched in late 2020 fueled anxiety among investors, who have knocked more than $1.3 trillion off the total market value of e-commerce platform Alibaba, games and social media operator Tencent and other tech giants.

Companies that want to transfer important data abroad would have to report on how much and what type of information is involved and security measures, according to the CAC. Regulators would decide within a week whether to accept that or conduct their own review, which could last up to 60 days.

The rules would apply to transfers that involve “sensitive personal information” of at least 10,000 people or any company that handles information on more than 1 million people. They give no details of what is important or sensitive.

Rules imposed earlier prohibit companies from storing information about Chinese citizens abroad.

That prompted complaints that global companies are put at a disadvantage because they can’t combine information from China with other countries, while Chinese competitors can collect all their data at their headquarters.

A separate law that takes effect Monday establishes security standards, prohibits companies from disclosing information without customer permission and tells them to limit how much they collect. Unlike data protection laws in Western countries, the Chinese rules say nothing about limiting government or ruling Communist Party access to personal information.

RelatedThe Implications of China’s New Personal Information Protection Law

RelatedChina Passes Tough New Online Privacy Law

RelatedTikTok owner ByteDance to pay $92M in US privacy Settlement

RelatedChina’s ‘Belt and Road Initiative’ Drives Cyber Spying

Related: New Law Will Help Chinese Government Stockpile Zero-Days

Written By

Click to comment

Expert Insights

Related Content

Privacy

The EU's digital policy chief warned TikTok’s boss that the social media app must fall in line with tough new rules for online platforms...

Privacy

Meta was fined an additional $5.9 million for violating EU data protection regulations with WhatsApp messaging app.

Cybersecurity Funding

Los Gatos, Calif-based data protection and privacy firm Titaniam has raised $6 million seed funding from Refinery Ventures, with participation from Fusion Fund, Shasta...

Mobile & Wireless

As smartphone manufacturers are improving the ear speakers in their devices, it can become easier for malicious actors to leverage a particular side-channel for...

Application Security

Microsoft’s security patching machine hummed into overdrive Tuesday with the release of fixes for at least 97 documented software vulnerabilities, including a zero-day that’s...

Cloud Security

AWS has announced that server-side encryption (SSE-S3) is now enabled by default for all Simple Storage Service (S3) buckets.

Compliance

The Federal Communications Commission (FCC) is proposing tighter rules on the reporting of data breaches by wireless carriers.The updated rules, the FCC says, will...

Privacy

Employees of Chinese tech giant ByteDance improperly accessed data from social media platform TikTok to track journalists in a bid to identify the source...