compliance

Subscribe to compliance via RSS

By Susan Ning, Han Wu, Yangdi Zhao, Yuanshan Li King & Wood Mallesons’ Commercial & Regulatory group

​Frequent Cybersecurity Incidents

Recently, the cyber ransomwares are rampant in the global cyberspace. Data leakage and network breakdown resulted from the viruses cause severe financial losses to network operators, and present a significant challenge in global cyberspace safety. In May, WannaCry Ransomware attacked over 150 countries, including the UK and Ukraine, and users in China were also influenced.[1] When the world is still in the shadow of WannyCry, a new ransomware, which is regarded as a variant of Petya virus, has already spread across the world. The new ransomware has attacked the UK, Ukraine, Russia, Denmark and other countries.[2]

Continue Reading Petya attack calls for an emergency plan

By Susan Ning, Yang Nan King & Wood Mallesons’ Commercial & Regulatory group.

“Invisible Waybills”: An Innovation to Better Protect Personal Information

A recent news article about the debut of “invisible waybills” by S.F. Express (a major delivery services company in China) [1] has attracted public attention.  S.F. Express has introduced an “end-to-end entire process information security solution” which protects its customers’ personal information.

First, the customer’s name, phone number, address and other personal information is encrypted and hidden or encoded on waybills.

Second, the customer’s personal information is not disclosed throughout the process so the firm’s departments and employees, such as couriers and customer service staff, will no longer access such information.
Continue Reading Putting an “Invisibility Cloak” over Personal Information —— A discussion on “invisible waybills” introduced by express industry

作者：宁宣凤 吴涵 赵泱地 李沅珊 金杜律师事务所商务合规部

宁宣凤网络安全事件频发

近期，网络勒索病毒在全球网络空间肆虐，所造成的数据泄露及网络瘫痪对网络运营者造成了严重的经济后果，也对全球网络空间安全带来了极大的挑战。5月爆发的WannaCry勒索病毒袭击了英国、乌克兰等150多个国家，中国国内也有用户受到影响。[1] WannaCry的冲击还未远去，一种被认为是Petya病毒变种的新勒索病毒又开始在全球肆虐，英国、乌克兰、俄罗斯、丹麦等地都已经爆发这种新病毒。[2]
Continue Reading Petya来袭，网络安全事件应急预案正当其时

作者：黄建雯 金杜律师事务所商务合规部

huang_jianwen2017年6月28日，国家发改委和商务部正式对外发布了《外商投资产业指导目录（2017年修订）》（“2017版目录”），并将于2017年7月28日起在全国实施。2015年3月10日发布的《外商投资产业指导目录（2015年修订）》（“2015版目录”）同时废止。
Continue Reading 开启“负面清单”新时代——《外商投资产业指导目录》新旧版对比

By Susan Ning, Wu Han and Zhao Yangdi King & Wood Mallesons’ Commercial & Regulatory group

宁宣凤“Big Data”, one of the hot topics in recent years, has been widely discussed. The impact of “Big Data” on competition interests both practitioners and scholars. The major concern from antitrust perspective is whether “Big Data” could facilitate monopoly, especially in the platform economy where data could be easily accessed or collected by platforms from multiple sides of the market. The purpose of this article is to review the role of data in different stages of platform development and analyze the possibility of monopoly based on the interplay between data and platforms. We will also discuss when and how authorities should intervene with the anti-competitive behaviors in the platform economy driven by “Big Data” in different scenarios. 
Continue Reading Could“Big Data”Facilitate Monopoly and How Shall We Step In?

作者：刘成 柴志峰 李雨濛 金杜律师事务所商务合规部

刘成近日，国务院办公厅印发了关于《深化医药卫生体制改革2017年重点工作任务》的通知 [1]，提出“2017年是贯彻落实全国卫生与健康大会精神和实施“十三五”深化医药卫生体制改革规划的重要一年，是形成较为系统的基本医疗卫生制度框架、完成医改阶段性目标任务的关键一年” 。近两年来，医药改革在定价、流通及采购环节均实施了一些新的政策，其中对于医药企业商业模式影响较大的包括以下内容:
Continue Reading 医药改革背景下医药行业反垄断合规风险点探析

作者：宁宣凤  杨楠 金杜律师事务所 商务合规部

宁宣凤2017年6月8日，工信部在其官网上发布《互联网新业务安全评估管理办法（征求意见稿）》（“《办法》”）[1]，公开向社会征求意见，截至2017年7月9日。这是在《网络安全法》已于2017年6月1日正式实施的大背景下，电信及互联网领域出现的又一部重要监管性文件。本文第一时间对其主要内容做一梳理，以方便企业等相关市场主体对其做进一步评论和评估。
Continue Reading 图解安全评估流程——互联网业务安全不可因“新”而废“管”

By Susan Ning, Wu Han, Zhao Yangdi, Chen Linlin King & Wood Mallesons’ Commercial & Regulatory group

untitledThe Cyberspace Administration of China (“CAC”) announced on 2 May 2017 the Measures for Security Review of Network Products and Services (Tentative) (the “Review Measures”), which will be formally implemented from 1 June 2017. The 16 articles of the Review Measures set up an institutional framework for the security review of network products and services. This is an integral part of the whole cybersecurity regime established by the Cybersecurity Law of the People’s Republic of China (the “Cybersecurity Law”). The Review Measures represents a further step and makes improvements to the CAC’s Measures for Security Review of Network Products and Services (Draft Review Measures) (the “Draft Review Measures”) which was released on 4 February 2017. This article will canvas the main provisions of the security review system for network products and services, the highlights of the Review Measures and the issues to be addressed, to provide guidance to companies in terms of cybersecurity compliance.
Continue Reading Building an Institutional Framework for Cyber Security Review — Understanding the Measures for Security Review of Network Products and Services (Tentative)

作者：宁宣凤 吴涵 李沅珊 金杜律师事务所商务合规部

ning_susan2016年11月7日，全国人大常委会审议通过了《中华人民共和国网络安全法》（“《网安法》”），该法将于2017年6月1日，也即今日正式实施。为了配合《网安法》的实施，国家互联网信息办公室（以下简称“网信办”）在《网安法》出台后陆续发布了一系列配套规定，并将与《网安法》同日实施。除此之外，网信办网络安全协调局负责人还透露，《网安法》实行之日起一年内将有更多的配套规定出台，包括但不限于关键信息基础设施保护办法、个人信息和重要数据出境安全评估办法等。[1]

作为我国网络安全领域的基础性法律，《网安法》的正式施行对于维护我国网络安全及规范相关市场主体行为具有重大意义。本文根据我们前期跟踪发布的法律法规解读，对今日实施的《网安法》和配套规定，及其个人信息保护相关的司法解释进行梳理，并列举未来一年内可能发布的更多相关规定和技术标准，为企业进行网络安全及数据合规提供参考。
Continue Reading 《网络安全法》及其部分配套规定今起实施