Draft law puts information security at center stage

Discussion of a new comprehensive cybersecurity law is accelerating in China, to address security problems originating at home and abroad and to improve the Internet space overall, according to experts in online security and law.

Calls for stronger cybersecurity laws in China have been amplified since Edward Snowden revealed the US government's secret spying program two years ago, the specialists said as they applauded a draft law released earlier this year.

"The legislation reflects that our leadership upholds cybersecurity, and the process has been accelerated," said Zuo Xiaodong, vice-president of the China Information Security Research Institute. "Some authorities in industry and in government information departments have studied various approaches to rules for 10 years, but there was no written version until the draft emerged."

In June, the draft law was submitted to the Standing Committee of the National People's Congress, China's top legislative body, for discussion. It was later published online to solicit public opinion.

The draft requires telecommunications and infrastructure departments to build an emergency system to deal with online attacks. It also highlighted information protection.

Online products or services that touch on State security should all be reviewed, it said.

If the draft is approved by the State Council, then provincial, regional and municipal governments will be empowered to impose restrictions on networks when there's a need to protect State security, or to tackle cases involving public security.

Zuo spoke highly of the explorations in cybersecurity legislation, but said some articles concerning security need further discussion in the light of Internet developments.

Ning Jiajun, director of the Experts Committee of the State Information Center, said the timing of the draft was good, as China's Internet has entered an era of rapid development.

"If there is no security in cyberspace, it will be hard to address developments in the industry," Ning said, urging acceleration of cybersecurity legislation to alleviate current thorny problems, including online attacks, as soon as possible.

"As for some details, such as how to conduct security reviews of online products or services, I think they could be addressed later," he said.

In the eyes of Wang Sixin, a law professor at the Communication University of China, the draft indicates that the country's Internet-related legislation is forging a new, comprehensive path.

"It's the first time that our legislators have attempted to make a comprehensive law on cyberspace. In the past, they just added and revised some articles relating to the Internet in current laws," Wang said.

Exactly when the cybersecurity law will be issued remains uncertain, though the legislative process was accelerated this year.

"Some items in the draft, including what obligations Internet enterprises should have, are currently in the heat of discussions because they relate to the interests of Web insiders," he said.