On May 25, the State Council distributed the Regulations on the Administration of Commercial Cryptography (Revised in 2023) (the "Regulations"), with effect from July 1, 2023.

The Regulations mainly involve: (1) improving the management system for commercial cryptography; (2) promoting the technological innovation and standardization of commercial cryptography; (3) establishing a sound testing and certification system for commercial cryptography; (4) strengthening the use of cryptography in electronic authentication services and the management of e-government electronic authentication service activities; (5) standardizing import and export management for commercial cryptography; and (6) promoting the application of commercial cryptography. Among others, the Regulations adopt list-based management of the import license and export control for commercial cryptography in accordance with the provisions on the import and export of commercial cryptography in the Cryptography Law, as well as the national export control and the administrative rules for dual-use item import and export, and clarify the approval procedures. The Regulations encourage the legal use of commercial cryptography by citizens, legal persons and other organizations to protect network and information security, and support the use of commercial cryptography for network products and services to enhance security. The requirements for the use of commercial cryptography for critical information infrastructure and the relevant requirements for national security review are also provided.

(Source: www.gov.cn)