Recently, the Ministry of Transport has issued the Administrative Provisions on the Information Security of Civil Aviation Network (for Trial Implementation) (Draft for Comment) (the "Draft for Comment") for public comments before March 30, 2017.
The Draft for Comment includes main contents as follows. The first is specifying each subject's responsibility in network information security; the second is constructing a network information security management system for all civil aviation related units; and the third is redoubling regulatory efforts by all administrative authorities for civil aviation. The Draft for Comment further provides for protecting passenger information from institutional and technical perspectives, to be specific, including the passenger information protection system, provisions on the collection and use of passenger information, and provisions on the transfer and entrustment of passenger information. Moreover, the Draft for Comment also sets forth explicit legal liabilities in two aspects. On one hand, all civil aviation related units may bear legal liability in different forms as the case may be, in case of their failure to implement relevant systems or responsibilities; on the other, staff working in administrative authorities for civil aviation may assume relevant legal liability if they fail to fulfill their regulatory responsibilities according to law.