The Cyberspace Administration of China recently published the draft Regulations on Network Eco-governance for public consultation. The regulations apply to the actions of network information content producers, network information content service platforms and network information content service users, which are prohibited from producing illegal or harmful information.
The draft Civil Code was recently submitted to the Standing Committee of the 13th National People's Congress for a third reading. Compared with the first and second drafts, the third draft expands the scope of the definition of 'personal information' to cover email addresses and location information.
The final version of the Provisions on the Cyber Protection of Personal Information of Children recently came into effect. According to the provisions, network operators must formulate separate rules and user agreements to protect children's personal information and designate a dedicated person to oversee the protection of such information.
The Ministry of Industry and Information Technology and nine other authorities recently published the Guiding Opinions on Strengthening Industrial Internet Safety in the context of establishing China's industrial internet security guarantee system. According to the opinions, the industrial internet security guarantee system should be established by the end of 2020 and be a sound and reliable mechanism by 2025.
The State Administration for Market Supervision recently promulgated the Interim Provisions for Prohibiting Monopoly Agreements. Although the draft provisions introduced a safe harbour clause for non-IP-related monopoly agreements, this has been removed from the final version. As debate continues as to whether to introduce a safe harbour clause to Chinese legislation, this article examines the history of the safe harbour rule and the potential reasons why it would not apply to all monopoly agreements.
The Cyberspace Administration of China recently released the Cybersecurity Review Measures (Draft for Comment). According to the draft, where an operator of critical information infrastructure purchases a network product or service, it must make an ex ante assessment of the potential security risks that could emerge once the product or service is put into operation and produce a security report accordingly.
The Cyberspace Administration of China recently issued the Administrative Measures for Data Security (Draft for Comment), which include rules on the collection, storage, transfer, processing and use of data in China via websites, as well as data protection and management. Among other things, the draft measures encourage network operators that collect personal information through websites, apps and other products to formulate specific rules regarding the collection and use of such information.
The Cyberspace Administration of China recently held a public consultation on the Provisions on the Cyber Protection of Personal Information of Children (Draft for Comment). The draft provisions set out a number of recommendations for network operators, including formulating special rules to protect children's personal information and user agreements and employing a personal information protection specialist or designating personnel to oversee the protection of children's personal information.
For foreign investors with an eye on the Chinese insurance market, obtaining an insurance intermediary licence is a good idea. However, compared with insurance brokerage licences, insurance agency licences are difficult for foreign investors to obtain. Therefore, foreign investors that wish to acquire control over a Chinese insurer should consider either setting up a new foreign-invested insurer or acquiring an existing foreign-invested insurer.
The Cyberspace Administration of China recently released the Measures on Security Assessment of Cross-Border Transfer of Personal Information (Draft for Comment). According to the draft, network operators must apply to the provincial-level cyberspace administration for a security assessment before conducting cross-border transfers. Further, network operators must record all cross-border transfers and retain the records for at least five years.
During the past five years, the Chinese courts and arbitration institutions have handled major disputes relating to reinsurance contracts. These cases prompted legislation in the reinsurance sector and drew attention to the need for more careful wording in reinsurance contracts. This article provides an overview of several essential provisions in reinsurance contracts under Chinese law.
The Ministry of Commerce of China recently announced the establishment of an Unreliable Entity List (UEL) targeting foreign entities and individuals that (among other things) fail to comply with the principles of the market economy or threaten China's national security. It is anticipated that the UEL will rely heavily on the Anti-monopoly Law, especially in relation to foreign entities with a noticeable market presence in China.
The China Banking and Insurance Regulatory Commission was recently formally unveiled in Beijing, marking the official launch of the new regulatory authority. This merger of the former China Banking Regulatory Commission and China Insurance Regulatory Commission is the biggest reform of China's financial regulatory system in more than 15 years and marks the start of the 'one committee, one bank, two commissions' regulation framework.
The China Banking and Insurance Regulatory Commission plans to abolish two of the requirements that foreign insurance brokerage companies must meet in order to conduct business in China (ie, 30 years of business operation history and $200 million worth of total assets). If this reform takes place, domestic and foreign investors are expected to have equal status when entering the Chinese insurance brokerage market.
The Security Protection Bureau of the Ministry of Public Security, the Beijing Cyber Industry Association and Research Institute Number 3 of the Ministry of Public Security recently issued the Guidelines for the Protection of Personal Information Security on the Internet, which set out a series of measures and processes for the protection of personal information. Although the guidelines appear to be non-binding, they are likely to be treated as a statute-like norm.
The Shanghai Market Regulation Bureau (SMRB) recently issued a penalty decision addressed to Eastman (China) Investment Management Co, Ltd, a Chinese subsidiary of US Chemical firm Eastman Chemical Company. Since this is the first antitrust enforcement decision to be issued by the SMRB since its establishment, it has drawn significant attention from commentators who have attempted to identify the bureau's enforcement approach.
Following the Chinese Central TV Station's (CCTV's) broadcast of the 3.15 programme in 2019, the Ministry of Industry and Information Technology decided to crack down on telephone harassment and strengthen the protection of personal information in the telecoms and internet sectors. The CCTV will broadcast 3.15 on 15 March each year in order to reveal company activities which infringe consumer rights and interests.
Although still fairly new, the State Administration for Market Regulation (SAMR) diligently investigated and penalised monopolistic behaviour in 2018, publishing a dozen cases alongside its local enforcement agencies which attracted media attention. Notably, livelihood-related industries (including the pharmaceutical industry) and trade associations appeared to come under the SAMR's spotlight.
The Shanghai Consumer Council recently released the results of its assessment of 39 apps, which aimed to evaluate the level of access that they had to users' personal information. The assessment revealed that 25 apps had been over collecting users' personal information and that only 14 apps had actual service-related reasons justifying their collection of sensitive personal information.
The Shenzhen Municipality Justice Bureau recently issued draft regulations on the administration of public security video and image systems for public comment. The draft regulations aim to protect public privacy and strengthen internet information security and information sharing by prohibiting the installation of video and image recording systems in certain locations which concern public privacy. Individuals and entities which fail to comply with the regulations will be subject to fines.