China’s cybersecurity laws have been expanded, granting fresh powers to the Ministry of Public Security to conduct on-site or remote inspections of companies’ computer networks. Security intelligence provider Recorded Future said the provisions include authorisation to copy user data or information regarding security measures, and to search for digital content prohibited by the government. The new rules also allow authorities to request a company to hand over any personal data, including email addresses, phone numbers, IP addresses and other details that could be used in criminal investigations. An officer of the company is required to sign a report prepared by the ministry during an on-site inspection, but this does not apply during a remote inspection. Meanwhile, there is no requirement within the regulations for the ministry to inform a company about the information it has gathered during an inspection.
China’s cybersecurity laws have been expanded, granting fresh powers to the Ministry of Public Security to conduct on-site or remote inspections of companies’ computer networks. Security intelligence provider Recorded Future said the provisions include authorisation to copy user data or information regarding security measures, and to search for digital content prohibited by the government. The new rules also allow authorities to request a company to hand over any personal data, including email addresses, phone numbers, IP addresses and other details that could be used in criminal investigations. Meanwhile, there is no requirement within the regulations for the ministry to inform a company about the information it has gathered during an inspection.