Cyberspace Administration of China, Measures for the Administration of the Publication of Cybersecurity Threat Information (Draft for Comments)

Issued: November 20, 2019

Main contents: Before publishing information on a cybersecurity incident, such as an attack on and disruption of, or illegal accessing of, a network or information system, the same shall be reported to the public security authority at the prefectural city level or above of the place where the incident occurred. The public security authority at the level in question shall report the relevant details to the cyberspace administration at the same level and the public security authority at the next higher level (Article 5).

Before any enterprise, association or individual publishes a regional comprehensive analysis report on cybersecurity attacks, incidents, risks and vulnerabilities, it/he/she shall report the same in advance to the cyberspace administration and public security authority at the prefectural city level or above of the region in question;