A new law regulating cryptography in China, for both the government and private users, will take effect on January 1st, 2020. While the announcement didn't provide many details on the new legislation, there are concerns regarding privacy and permissions since they could vary depending on if you're working for the ruling party or not.
The law itself states that all state secrets will be stored and transmitted using "core and common" encryption, with institutions having to establish "management systems" to guarantee security. "Exclusive" info like source code, and any business secrets, will have to be kept confidential by the managers.
The new measure will encourage commercial development and uses of encryption, although in a regulated sense – any sales, use and development "must not harm the state security and public interests," with another point that anyone who fails to report security risks, or who offers systems that "are not examined authenticated," will be punished.
The existing laws in China are already pretty strict, and anyone who appears threatening to the regime will be punished, however, the new regulation pushes it even further, meaning you now can't even dream of designing something that could challenge the state.
Many believe the new law will only offer superficial protection, with China's regular mass surveillance operations and the ability and power to request data and receive it momentarily, there's not much that can be done if the ruling party wants certain data.
Leave a Reply
Thank you for your response.
Please verify that you are not a robot.