Critical network product purchases subject to cybersecurity review

The procurement of network products and services by critical information infrastructure operators in China, which concerns or may impact national security, shall be subject to cybersecurity review, according to new regulations unveiled on April 27.

Set to take effect on June 1, 2020, the regulations were jointly issued by the Cyberspace Administration of China (CAC) and 11 other government agencies.

Among the network products and services covered by the regulations are core network devices, high-performance computers and servers, mass storage devices, large databases and related software, network security equipment and cloud computing services.

The regulations, according to a CAC official, aim to safeguard the security of the supply chain of critical information infrastructure, by spotting and avoiding potential risks and damages.

The move did not mean to restrict or discriminate against foreign products or services, said the official, noting that China's policy of welcoming foreign products and services remains unchanged.