• About
  • Archive
  • Contact
  • Home 1
  • Submit a Story
  • Submit a Story
  • USCBC Podcasts
China Business Review
  • Operations
    Multinational Supply Chains in a Post-Pandemic China

    Multinational Supply Chains in a Post-Pandemic China

    Managing Risk in the “New Era”

    Managing Risk in the “New Era”

    Design Patents vs. Trade Dress: Protecting IP in China

    Design Patents vs. Trade Dress: Protecting IP in China

    As China Emerges from COVID-19, US Companies Invest to Compete

    As China Emerges from COVID-19, US Companies Invest to Compete

    Inside the Mad Rush for Masks – Anatomy of a 10 Million Mask Order

    Inside the Mad Rush for Masks – Anatomy of a 10 Million Mask Order

    Addressing Risk in the Era of US-China “Great Power” Competition

    Addressing Risk in the Era of US-China “Great Power” Competition

  • Politics
    Hong Kong’s National Security Law, Five Months In

    Hong Kong’s National Security Law, Five Months In

    China Implements its Long-Awaited Unreliable Entities List Mechanism

    China Implements its Long-Awaited Unreliable Entities List Mechanism

    Competing WTO Reform Agendas and the Contest for the Next Director-General

    Competing WTO Reform Agendas and the Contest for the Next Director-General

    China Eyes Further Northeast Asian Economic Integration in RCEP

    China Eyes Further Northeast Asian Economic Integration in RCEP

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    A Game of Chicken

    A Game of Chicken

  • Tech
    The Growing Intersection of Digital Health and Data Processing in China

    The Growing Intersection of Digital Health and Data Processing in China

    Export Controls on Emerging and Foundational Technologies: A Null Set?

    Export Controls on Emerging and Foundational Technologies: A Null Set?

    How Companies Are Reacting to China’s New Data Security Scheme

    How Companies Are Reacting to China’s New Data Security Scheme

    China’s Participation in International Standards Setting: Benefits and Concerns for US Industry

    China’s Participation in International Standards Setting: Benefits and Concerns for US Industry

    The Hidden Challenges of China’s Booming Medical AI Market

    The Brave New Business Models Making Waves in China’s Ecommerce Market

    Trending Tags

    • Intellectual Property
    • innovation
    • cybersecurity
    • ecommerce
    • tech
  • Society
    COVID-19 Could Doom or Deliver US-China Commercial Relations

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    The Year in Social Credit: Where is Corporate Social Credit Going in 2020 and Beyond?

    The Year in Social Credit: Where is Corporate Social Credit Going in 2020 and Beyond?

    Open Government Developments in China: Implications for US Businesses

    The Hidden Challenges of China’s Booming Medical AI Market

    The Handshake that Changed the World

    President Carter and Vice Premier Deng at the Performance of American Arts

    January 29, 1979 Performance of American Arts for Deng Xiaoping

  • Media

    Gallery: Craig Allen’s Trip to China

    USCBC 45th Annual Membership Meeting

    USCBC 45th Anniversary DC Open House

    USCBC President’s China Visit

    USCBC Hosts Business Roundtable with Zhejiang Party Secretary Che Jun

    USCBC hosts Comprehensive Economic Dialogue (CED) Luncheon

  • Podcasts
No Result
View All Result
  • Operations
    Multinational Supply Chains in a Post-Pandemic China

    Multinational Supply Chains in a Post-Pandemic China

    Managing Risk in the “New Era”

    Managing Risk in the “New Era”

    Design Patents vs. Trade Dress: Protecting IP in China

    Design Patents vs. Trade Dress: Protecting IP in China

    As China Emerges from COVID-19, US Companies Invest to Compete

    As China Emerges from COVID-19, US Companies Invest to Compete

    Inside the Mad Rush for Masks – Anatomy of a 10 Million Mask Order

    Inside the Mad Rush for Masks – Anatomy of a 10 Million Mask Order

    Addressing Risk in the Era of US-China “Great Power” Competition

    Addressing Risk in the Era of US-China “Great Power” Competition

  • Politics
    Hong Kong’s National Security Law, Five Months In

    Hong Kong’s National Security Law, Five Months In

    China Implements its Long-Awaited Unreliable Entities List Mechanism

    China Implements its Long-Awaited Unreliable Entities List Mechanism

    Competing WTO Reform Agendas and the Contest for the Next Director-General

    Competing WTO Reform Agendas and the Contest for the Next Director-General

    China Eyes Further Northeast Asian Economic Integration in RCEP

    China Eyes Further Northeast Asian Economic Integration in RCEP

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    A Game of Chicken

    A Game of Chicken

  • Tech
    The Growing Intersection of Digital Health and Data Processing in China

    The Growing Intersection of Digital Health and Data Processing in China

    Export Controls on Emerging and Foundational Technologies: A Null Set?

    Export Controls on Emerging and Foundational Technologies: A Null Set?

    How Companies Are Reacting to China’s New Data Security Scheme

    How Companies Are Reacting to China’s New Data Security Scheme

    China’s Participation in International Standards Setting: Benefits and Concerns for US Industry

    China’s Participation in International Standards Setting: Benefits and Concerns for US Industry

    The Hidden Challenges of China’s Booming Medical AI Market

    The Brave New Business Models Making Waves in China’s Ecommerce Market

    Trending Tags

    • Intellectual Property
    • innovation
    • cybersecurity
    • ecommerce
    • tech
  • Society
    COVID-19 Could Doom or Deliver US-China Commercial Relations

    COVID-19 Could Doom or Deliver US-China Commercial Relations

    The Year in Social Credit: Where is Corporate Social Credit Going in 2020 and Beyond?

    The Year in Social Credit: Where is Corporate Social Credit Going in 2020 and Beyond?

    Open Government Developments in China: Implications for US Businesses

    The Hidden Challenges of China’s Booming Medical AI Market

    The Handshake that Changed the World

    President Carter and Vice Premier Deng at the Performance of American Arts

    January 29, 1979 Performance of American Arts for Deng Xiaoping

  • Media

    Gallery: Craig Allen’s Trip to China

    USCBC 45th Annual Membership Meeting

    USCBC 45th Anniversary DC Open House

    USCBC President’s China Visit

    USCBC Hosts Business Roundtable with Zhejiang Party Secretary Che Jun

    USCBC hosts Comprehensive Economic Dialogue (CED) Luncheon

  • Podcasts
No Result
View All Result
China Business Review
No Result
View All Result
Home Cybersecurity

How do China’s Information Security Laws Affect You?

USCBC by USCBC
August 26, 2016
Share on FacebookShare on TwitterLinkedin

By Paul Milton

The Chinese information security market is ever-changing, and the rules and regulations surrounding it may seem like a moving target. Identifying these standards and understanding how they can work for your business is a key to success in the China market.

The China Certification of Information Security (CCIS) mark is required for all information security products used by the Chinese state agencies, and is voluntary for other information security products. China Compulsory Certification, or CCC, is required for many international products looking to enter the Chinese market; other factors, such as local requirements and potential uses of the device, could add the CCIS requirement, even for products not intended for government procurement.

Product Categories

CCIS certification is granted by the Chinese Information Security Certification Centre (ISCCC), which sets eight categories of information security equipment that require the certification:

  • Border security: Firewalls*; line selectors and network security separated cards; security isolation and information exchange products*
  • Communication security: Secure routers*
  • Authentication and access control: Smart card chip operating systems*
  • Data security: Data backup and recovery products; secure operating systems*; secure database systems*
  • Content security: Anti-spam products
  • Valuation, audit, and control: Intrusion detection systems; network vulnerability scanning products; security audit products
  • Application security: Website recovery products

*The product types marked with an asterisk require cypher testing by the Office of the State Commercial Cryptography Administration, which must be completed before obtaining CCIS certification. However, Chinese regulations on encryption products often present challenges.

In certain cases, China may invoke local ownership or investment regulations. The Multi-Level Protection Scheme (MLPS) in China  is used to protect Chinese national security, but is often viewed as a way to  protect certain local industries from international competition. Chinese regulations require any information security products classified by MLPS as level three or higher  to be invested or owned by Chinese citizens or companies, which presents a challenge for international information security companies.

Encryption products are often subject to additional scrutiny and regulation. The real-world application of these regulations is that Chinese-owned companies run the encryption technology market, and foreign developers and engineers face high barriers to market entry.

Depending on the type of information security product involved, additional certifications might be necessary. For example, products that connect to a public telecommunications network require Network Access License certification, and products that use radio transmitters require Radio Type Approval certification.

Regulated testing and inspections

IT products must undergo local testing at a Chinese government-accredited test laboratory, according to OSCCA requirements, where experts check the product specifications against applicable Chinese and international standards. Once the testing is complete, the report is sent to the ISCCC for review and approval.

Chinese information security laws also require international manufacturers to submit to an ISCCC factory inspection. ISCCC officials inspect the factory, ensuring products are up to standards and product conformity regulations are met. The manufacturer is typically responsible for the cost of the inspection, including travel expenses and day fees for inspection staff.

Challenges for businesses

In certain areas of China, products must meet local cybersecurity and information technology standards in addition to the national CCIS standards, according to The Software Alliance. After the product is  CCIS certified, it might be valuable to consult with a compliance or certification agency to ensure products are up to international, national, and local standards.

It remains to be seen if China will keep a tight hold on IT products coming into the country. But for now, the best way to stay on top of local and national regulations is to study the product categories, figure out where you fit in, and work with a compliance agency with an established relationship with Chinese authorities.

 

About the author: Paul Milton is the CEO of G&M Compliance, a full-service compliance and certification agency headquartered in Orange, Calif. G&M Compliance specializes in getting certifications fast, and they have helped clients sell products in China, Europe, India, and around the world since 1997. With technical expertise, industry knowledge, and valuable connections, G&M certify a wide range of products, including challenging certifications like wireless products, IT equipment, and automotive products.

USCBC

USCBC

Next Post

Cybersecurity best practices for the traveling executive: A Q&A with Crumpton Group’s Rick Doten

Recommended.

The Growing Intersection of Digital Health and Data Processing in China

April 12, 2021

From West to East: The Charged Challenge of Delivering Electricity

April 7, 2021

As US-China Ties Fray, Indiana Firms Seek to Keep Trade Flowing

March 26, 2021

Multinational Supply Chains in a Post-Pandemic China

March 5, 2021

Latest Podcasts.

A quick recap of Forecast Beijing 2021

April 7, 2021

How can the United States compete with China on semiconductors?

April 2, 2021

What companies should know about cybersecurity and data flows in China

March 31, 2021

Takeaways from the Alaska meetings

March 23, 2021
China Business Review

China Business Review is the official magazine of the US-China Business Council, a nonprofit and nonpartisan trade association that represents more than 200 American companies doing business in China.

  • How to contribute to China Business Review

Categories

  • Bilateral Relations
  • Business Etiquette
  • CBR Spotlight
  • China Deals
  • Corruption
  • Cybersecurity
  • Ecommerce
  • Environment
  • Finance
  • Galleries
  • Getting Started
  • HR & Staffing
  • Infographics
  • Innovation
  • Intellectual Property
  • Management
  • Media
  • Operations
  • Opinion
  • Policy & Regulations
  • Politics
  • PR & Marketing
  • Rural Issues
  • Safety
  • Social Policy
  • Society
  • Standards + Licensing
  • Sustainability
  • Tax
  • Tech
  • Top Story
  • Trade
  • Uncategorized
  • US-China Business Council
  • Videos

Tags

Agreements Agriculture Alibaba Best Practices Business Environment China China's Investments Abroad China Market Intelligence Chinese Consumers Chinese Investment Commentary Consumer Trends E-Commerce Economic Trends Energy Environment Events Food Foreign Investment Going Global Healthcare Reform Human Resources Infrastructure Internet Interview Investment Investments into China IPO Joint Venture Labor Legal Analysis M&A Manufacturing Media National People's Congress Q&A Strategic and Economic Dialogue Supply Chains Technology Trade Transparency US-China Relations USCBC US Exports to China Xi Jinping

Join our Mailing List

Sign up for the US-China Business Council's newsletters to stay ahead of the game with roundups, analysis, and commentary.

Sign Up

Follow Us

  • About
  • USCBC
  • Submit a Story
  • Archive

© 2021 China Business Review

No Result
View All Result
  • Operations
  • Politics
  • Tech
  • Society
  • Media
  • Podcasts

© 2021 China Business Review