Given that the Data Security Law is one of the three fundamental data protection laws in China, the legislative process of the law has attracted much attention. In July 2020, comments were solicited for the first draft of the Data Security Law (the First Draft). Nine months later, the 13th Standing Committee of the National People’s Congress released the second draft of the Data Security Law (the Second Draft), which was open for public comments until May 28, 2021. While the Cybersecurity Law focuses more on the security of the network/system operation and network information content and the Personal Information Protection Law focuses more on the security of personal information, the Data Security Law clarifies China’s data security governance and supervision system at the legislative level.
