China Publishes Three Cybersecurity Standards Practice Guides
Three Chinese practice guides address data security on academic service platforms, data handling when internet platforms close, and privacy in QR-code food ordering.
This article introduces three recently published Chinese cybersecurity standards practice guides: data security for academic and scientific service platforms, secure data handling when internet platforms cease service, and personal information protection in QR-code food ordering. The English titles are descriptive translations, not official English editions.
The Secretariat of China’s National Technical Committee on Cybersecurity Standardization has released the three guides outlined below.
1. Data security requirements for academic and scientific service platforms
This guide was prepared to standardize data handling on academic and scientific service platforms, protect data security, and promote lawful, reasonable and effective use of academic and scientific data. Its objectives also include protecting the lawful rights of individuals and organizations and safeguarding national security and public interests in China.
It sets out security safeguards, responsibilities and obligations for platform operators’ data processing activities. It applies to those activities and can also inform inspections and assessments organized by the relevant supervisory authorities.
2. Secure data handling when internet platforms cease service
This guide addresses data processing when an internet platform stops operating. It aims to protect data security, support lawful and appropriate data use, preserve individual and organizational rights, and safeguard national security and public interests in China.
It proposes general security requirements for network data, specific requirements for personal information, and requirements for important data during service shutdown. It guides platform data handlers and can serve as a reference for competent authorities and third-party assessment bodies.
3. Personal information protection in QR-code food ordering
This guide helps restaurants standardize the processing of personal information in QR-code ordering services and reduce harm to individuals’ rights arising from such services.
It specifies overall and detailed personal information protection requirements and applies to restaurants’ data processing activities when providing QR-code ordering.
Source: Secretariat of China’s National Technical Committee on Cybersecurity Standardization.