On October 8, the Ministry of Industry and Information Technology ("MIIT") drafted the Administrative Measures for Data Security in the Field of Industry and Information Technology (for Trial Implementation) (Draft for Comment) ( the "Draft for Comment") to solicit public opinions.

The Draft for Comment mainly involves: (1) industry management duties; (2) data classification and grading, and important data security management; (3) security management for the full life cycle of data; (4) data security monitoring and early warning, and emergency management; (5) data security testing, evaluation and certification management; (6) supervision and inspection. The Draft for Comment specifies the classification and grading methods for industry and telecommunication-related data, making clear the conditions for determining general data, important data and core data. Furthermore, it is required to establish working mechanisms, with the linkage of "department-locality-enterprise", for data classification and grading, the identification of important data and core data, and data classification protection in the field of industry and information technology; establish a filing management system for the full life cycle of industry and telecommunication-related important data and core data.

(Source: Ministry of Industry and Information Technology)