26 September, 2019
On 9 August 2019, CAC issued a notice to elaborate on the security assessment clause (clause 9) in the Regulation implemented in February 2019. Amongst other obligations imposed on blockchain information service providers such as establishing a user registration system, conducting information verification and keeping records, the Regulation requires providers to conduct security assessment whenever they offer new products, applications or functions.
CAC's guidance explains that for such security assessment, the providers may either conduct self-security assessment or may request accreditation agencies approved by the CAC to conduct security assessment.
For further information, please contact:
John Koh, Director, Osborne Clarke
john.koh@osborneclarke.com