Chapter I — General Provisions
These Regulations are enacted in order to regulate data processing activities, safeguard data security, protect the lawful rights and interests of individuals and organisations, safeguard the sovereignty, security and development interests of Hulian and promote the lawful, reasonable and effective use of data. For the purposes of these Regulations, a "data processor" means an organisation or individual that independently determines the purpose and manner of processing, and "important data" means data which, if tampered with, destroyed, leaked or unlawfully obtained or used, may endanger the security of Hulian or the public interest.
Chapter II — Obligations of Data Processors
Data processors shall, in accordance with laws and regulations, establish and improve a whole-process data security management system, organise data security training, and adopt appropriate technical and other necessary measures to safeguard data security. A processor that handles important data shall also designate a person responsible for data security and a management body for that purpose.
Chapter III — Important Data and Cross-Border Flows
The Hulian administers important data by means of a catalogue, which the Hulian data authority shall draw up together with the relevant departments and adjust dynamically. A data processor that provides important data to an overseas recipient shall first apply to the Hulian data authority for a security assessment; data may not be provided abroad unless that assessment is passed.
Chapter IV — Supervision and Legal Liability
The Hulian data authority and the other competent departments shall perform their data security supervision duties in accordance with the law. A party that processes important data in violation of these Regulations, or that fails to apply for a security assessment as required, shall be ordered to make rectification and given a warning by the competent department, and may also be fined not less than two million and not more than ten million Hulian yuan; where the circumstances are serious, it shall be ordered to suspend the relevant business and to reorganise.