The Cyberspace Administration of China ("CAC") has recently issued the Provisions on the Safety Assessment for Internet Information Services Capable of Creating Public Opinions or Social Mobilization (the "Provisions"), with effect from November 30, 2018.
The Provisions state that, an internet information service provider shall conduct the security assessment on its own, pursuant to these Provisions, under any of five circumstances, such as "when it releases a type of information service that may create public opinions or has the ability to mobilize folks, on the internet, or adds a new function with similar effects to existing information services", and shall bear responsibility for the assessment results. In addition, the Provisions require that in conducting the security assessment, an internet information service provider shall comprehensively evaluate all aspects , including the compliance of information services, new technologies and new applications, the effectiveness of security measures it has taken as required by laws, administrative regulations, departmental rules and standards, and the effectiveness of its precautions against security risks, and pay particular attention to certain matters, including "measures to verify users' real identities and retain the registration information". Furthermore, the Provisions state that, an internet information service provider shall submit the security assessment report through the National Internet Security Management Service Platform to the cyberspace regulator and the public security organ, above the prefecture level, at its locality.