• About
  • Archive
  • China Business Review Historical Archive
  • Contact
  • Home 1
  • Submit a Story
  • Submit a Story
  • USCBC Podcasts
China Business Review
  • Operations
    Multinational Supply Chains in a Post-Pandemic China

    Multinational Supply Chains in a Post-Pandemic China

    Managing Risk in the “New Era”

    Managing Risk in the “New Era”

    Design Patents vs. Trade Dress: Protecting IP in China

    Design Patents vs. Trade Dress: Protecting IP in China

    As China Emerges from COVID-19, US Companies Invest to Compete

    As China Emerges from COVID-19, US Companies Invest to Compete

    Inside the Mad Rush for Masks – Anatomy of a 10 Million Mask Order

    Inside the Mad Rush for Masks – Anatomy of a 10 Million Mask Order

    Addressing Risk in the Era of US-China “Great Power” Competition

    Addressing Risk in the Era of US-China “Great Power” Competition

  • Politics
    Hong Kong’s National Security Law, Five Months In

    Hong Kong’s National Security Law, Five Months In

    China Implements its Long-Awaited Unreliable Entities List Mechanism

    China Implements its Long-Awaited Unreliable Entities List Mechanism

    Competing WTO Reform Agendas and the Contest for the Next Director-General

    Competing WTO Reform Agendas and the Contest for the Next Director-General

    China Eyes Further Northeast Asian Economic Integration in RCEP

    China Eyes Further Northeast Asian Economic Integration in RCEP

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    A Game of Chicken

    A Game of Chicken

  • Tech
    China and CPTPP: Does China’s Emerging Data Regime Live Up to CPTPP Principles?

    China and CPTPP: Does China’s Emerging Data Regime Live Up to CPTPP Principles?

    Can China’s Beleaguered Gaming Industry Overcome the New Wave of Restrictions?

    Can China’s Beleaguered Gaming Industry Overcome the New Wave of Restrictions?

    Semiconductor Self-Sufficiency: MIIT’s Ambitions for 2021 and Beyond

    Semiconductor Self-Sufficiency: MIIT’s Ambitions for 2021 and Beyond

    The Growing Intersection of Digital Health and Data Processing in China

    The Growing Intersection of Digital Health and Data Processing in China

    Export Controls on Emerging and Foundational Technologies: A Null Set?

    Export Controls on Emerging and Foundational Technologies: A Null Set?

    How Companies Are Reacting to China’s New Data Security Scheme

    How Companies Are Reacting to China’s New Data Security Scheme

    Trending Tags

    • Intellectual Property
    • innovation
    • cybersecurity
    • ecommerce
    • tech
  • Society
    Can China’s Beleaguered Gaming Industry Overcome the New Wave of Restrictions?

    Can China’s Beleaguered Gaming Industry Overcome the New Wave of Restrictions?

    China Cracks Down on Education Industry in Effort to Increase Birthrate

    China Cracks Down on Education Industry in Effort to Increase Birthrate

    The Extraordinary Rise of China’s Pet Industry

    The Extraordinary Rise of China’s Pet Industry

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    The Year in Social Credit: Where is Corporate Social Credit Going in 2020 and Beyond?

    The Year in Social Credit: Where is Corporate Social Credit Going in 2020 and Beyond?

    Open Government Developments in China: Implications for US Businesses

  • Media

    Gallery: Craig Allen’s Trip to China

    USCBC 45th Annual Membership Meeting

    USCBC 45th Anniversary DC Open House

    USCBC President’s China Visit

    USCBC Hosts Business Roundtable with Zhejiang Party Secretary Che Jun

    USCBC hosts Comprehensive Economic Dialogue (CED) Luncheon

  • Podcasts
  • Archive
No Result
View All Result
  • Operations
    Multinational Supply Chains in a Post-Pandemic China

    Multinational Supply Chains in a Post-Pandemic China

    Managing Risk in the “New Era”

    Managing Risk in the “New Era”

    Design Patents vs. Trade Dress: Protecting IP in China

    Design Patents vs. Trade Dress: Protecting IP in China

    As China Emerges from COVID-19, US Companies Invest to Compete

    As China Emerges from COVID-19, US Companies Invest to Compete

    Inside the Mad Rush for Masks – Anatomy of a 10 Million Mask Order

    Inside the Mad Rush for Masks – Anatomy of a 10 Million Mask Order

    Addressing Risk in the Era of US-China “Great Power” Competition

    Addressing Risk in the Era of US-China “Great Power” Competition

  • Politics
    Hong Kong’s National Security Law, Five Months In

    Hong Kong’s National Security Law, Five Months In

    China Implements its Long-Awaited Unreliable Entities List Mechanism

    China Implements its Long-Awaited Unreliable Entities List Mechanism

    Competing WTO Reform Agendas and the Contest for the Next Director-General

    Competing WTO Reform Agendas and the Contest for the Next Director-General

    China Eyes Further Northeast Asian Economic Integration in RCEP

    China Eyes Further Northeast Asian Economic Integration in RCEP

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    A Game of Chicken

    A Game of Chicken

  • Tech
    China and CPTPP: Does China’s Emerging Data Regime Live Up to CPTPP Principles?

    China and CPTPP: Does China’s Emerging Data Regime Live Up to CPTPP Principles?

    Can China’s Beleaguered Gaming Industry Overcome the New Wave of Restrictions?

    Can China’s Beleaguered Gaming Industry Overcome the New Wave of Restrictions?

    Semiconductor Self-Sufficiency: MIIT’s Ambitions for 2021 and Beyond

    Semiconductor Self-Sufficiency: MIIT’s Ambitions for 2021 and Beyond

    The Growing Intersection of Digital Health and Data Processing in China

    The Growing Intersection of Digital Health and Data Processing in China

    Export Controls on Emerging and Foundational Technologies: A Null Set?

    Export Controls on Emerging and Foundational Technologies: A Null Set?

    How Companies Are Reacting to China’s New Data Security Scheme

    How Companies Are Reacting to China’s New Data Security Scheme

    Trending Tags

    • Intellectual Property
    • innovation
    • cybersecurity
    • ecommerce
    • tech
  • Society
    Can China’s Beleaguered Gaming Industry Overcome the New Wave of Restrictions?

    Can China’s Beleaguered Gaming Industry Overcome the New Wave of Restrictions?

    China Cracks Down on Education Industry in Effort to Increase Birthrate

    China Cracks Down on Education Industry in Effort to Increase Birthrate

    The Extraordinary Rise of China’s Pet Industry

    The Extraordinary Rise of China’s Pet Industry

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    The Year in Social Credit: Where is Corporate Social Credit Going in 2020 and Beyond?

    The Year in Social Credit: Where is Corporate Social Credit Going in 2020 and Beyond?

    Open Government Developments in China: Implications for US Businesses

  • Media

    Gallery: Craig Allen’s Trip to China

    USCBC 45th Annual Membership Meeting

    USCBC 45th Anniversary DC Open House

    USCBC President’s China Visit

    USCBC Hosts Business Roundtable with Zhejiang Party Secretary Che Jun

    USCBC hosts Comprehensive Economic Dialogue (CED) Luncheon

  • Podcasts
  • Archive
No Result
View All Result
China Business Review
No Result
View All Result
Home Cybersecurity

How Companies Are Reacting to China’s New Data Security Scheme

Antonio Douglas by Antonio Douglas
April 3, 2020
How Companies Are Reacting to China’s New Data Security Scheme
Share on FacebookShare on TwitterLinkedin

Companies in China are worried that they may be held accountable for conforming to high-stakes, but voluntary, cybersecurity standards before the specifics of those standards become clear. The new standards can apply to all systems and platforms that deal with data in China.

Put simply, China’s Multi-Level Protection Scheme (MLPS), officially launched in 2004 and overseen by the Ministry of Public Security (MPS), classifies systems based on the damage that a hypothetical failure of the system would have on China’s national and economic security. Rating systems on a 1 to 5 scale, systems ranked at 3 or higher are considered higher-stake, and subject to notably stricter oversight by China’s cyber regulators, including restrictions on how companies are allowed to handle the data they collect. 

MLPS 2.0 is not a “new” system, but some of its concepts are

As part of the 2017 Cybersecurity Law’s implementation, the Standardization Administration of China (SAC) released a batch of standards, not uprooting, but expanding the scope of the MLPS. The “MLPS 2.0” is a much-needed update, and now includes cloud computing, mobile networks, internet of things, and other modern technologies. For companies, the expansion is only half of the equation. 

China’s Cybersecurity Law introduced several new concepts mentioned in MLPS 2.0 like data localization, personal information, and crossborder data flow, all of which have huge implications for foreign and domestic businesses in China. The big kicker, though, is that MLPS 2.0 is up and running, but the regulations that clarify what these concepts actually mean are still in draft form, leaving companies with little ground to stand on if their compliance comes into question.

Competing regimes

MPS is not the only regulator with skin in the game. The Cyberspace Administration of China (CAC) also has its own regime for systems deemed to be “critical information infrastructure” (CII). Though CAC has taken some steps to clarify the definition, in essence, CII is defined roughly as a network that “if destroyed, suffering a loss of function, or experiencing leakage of data—might seriously endanger national security, national welfare, the people’s livelihood, or the public interest.” The overlapping criteria for CII and higher-ranked MLPS systems raise questions about how the two schemes will interact. 

Industry insiders seem to think that CII will correlate with a 3 or higher ranking in the MLPS system. Even if this is true, companies may still have to undergo redundant testing while MPS and CAC vie for dominance in this arena. 

Some companies unsure of next steps

While some companies have taken the preliminary step of self-evaluating where their systems fall under the MLPS 2.0 system, others have begun filing with MLPS directly. Filing with the MLPS has its benefits; for one, if you are a consulting company, it allows you to advise clients on how to go through the process if you have done it yourself. Filing now could also reduce the risk of being targeted for non-compliance due to politically-motivated factors in the future, an increasing possibility as US-China bilateral tension grows. On the other hand, when companies file in the MLPS system, they open themselves up to the potential for deeper and more frequent probing and inspections by the Chinese government and also the potential for sensitive information to be leaked in the process. Industry sources have reported feeling implicit pressure to file at a higher grade, despite the criteria not being entirely clear. 

Until regulations undergirding the MLPS 2.0 standards are finalized, companies have little incentive to comply with a regime perceived as unfinished or subject to change. Any future modification of the requirements could prove costly to a company currently investing resources to be compliant with the current regime.  

Companies that have charged forward and begun the process have gotten mixed results. Third-party testing agencies approved by MPS to help companies test the security of their networks based on their MLPS grading level have been known to have a shaky understanding of the regulations themselves. One company reported that a testing agency determined that the company’s system couldn’t be compliant unless the company bought the testing agency’s software, bringing the agency’s partiality into serious question. Given that there are hundreds of qualified testing agencies, it is not surprising to hear companies report varying experiences, but these reports do indicate that it may take some time before all agencies are on the same page as the MLPS 2.0 continues to roll out.

The result? Many companies are taking the wait-and-see approach.

Antonio Douglas is a business advisory services manager at the US-China Business Council based on Beijing. He covers issues in the ICT sector.

Antonio Douglas

Antonio Douglas

Next Post
China Eyes Further Northeast Asian Economic Integration in RCEP

China Eyes Further Northeast Asian Economic Integration in RCEP

Recommended.

China and CPTPP: Does China’s Emerging Data Regime Live Up to CPTPP Principles?

August 5, 2022

Reflections on the Phase One Agreement

January 20, 2022

Can China’s Beleaguered Gaming Industry Overcome the New Wave of Restrictions?

November 29, 2021

From Reshoring to Rightshoring: Dr. Sara Hsu on the Future of US-China Supply Chains

August 4, 2021

Latest Podcasts.

What recent chip export controls mean for business

January 25, 2023

Taking stock as we enter USCBC’s 50th year

January 13, 2023

What unexpected midterm results mean for China policy

November 16, 2022

Two tales of travel to China

November 7, 2022
China Business Review

China Business Review is the official magazine of the US-China Business Council, a nonprofit and nonpartisan trade association that represents more than 200 American companies doing business in China.

  • How to contribute to China Business Review

Categories

  • Bilateral Relations
  • Business Etiquette
  • CBR Spotlight
  • China Deals
  • Corruption
  • Cybersecurity
  • Ecommerce
  • Environment
  • Finance
  • Galleries
  • Getting Started
  • HR & Staffing
  • Infographics
  • Innovation
  • Intellectual Property
  • Management
  • Media
  • Operations
  • Opinion
  • Policy & Regulations
  • Politics
  • PR & Marketing
  • Rural Issues
  • Safety
  • Social Policy
  • Society
  • Standards + Licensing
  • Sustainability
  • Tax
  • Tech
  • Top Story
  • Trade
  • Uncategorized
  • US-China Business Council
  • Videos

Tags

Agreements Agriculture Alibaba Best Practices Business Environment China China's Investments Abroad China Market Intelligence Chinese Consumers Chinese Investment Commentary Consumer Trends E-Commerce Economic Trends Energy Environment Events Food Foreign Investment Going Global Healthcare Reform Human Resources Infrastructure Internet Interview Investment Investments into China IPO Joint Venture Labor Legal Analysis M&A Manufacturing Media National People's Congress Q&A Strategic and Economic Dialogue Supply Chains Technology Trade Transparency US-China Relations USCBC US Exports to China Xi Jinping

Join our Mailing List

Sign up for the US-China Business Council's newsletters to stay ahead of the game with roundups, analysis, and commentary.

Sign Up

Follow Us

  • About
  • USCBC
  • Submit a Story
  • Archive

© 2022 China Business Review

No Result
View All Result
  • Operations
  • Politics
  • Tech
  • Society
  • Media
  • Podcasts
  • Archive

© 2022 China Business Review