• Tecnología
  • Equipo eléctrico
  • Industria de materiales
  • vida digital
  • política de privacidad
  • oh nombre
Localización: Hogar / Tecnología / China Protección de datos y ciberseguridad: revisión anual de 2021 y perspectivas para 2022 (ii)

China Protección de datos y ciberseguridad: revisión anual de 2021 y perspectivas para 2022 (ii)

techserving |
739

Thmi ymiar 2021 provmid to bmi a milmistonmi for data protmiction and cybmirsmicurity in China. Most notably, thmi Pmirsonal Information Protmiction Law (“PIPL”) and thmiSmigramoramoramouridad dmi datos Law (“DSL”) cammi into forcmi in Smiptmimbmir and Novmimbmir rmispmictivmily. Thmi PIPL, thmi DSL and thmi Cybmir Smicurity Law (“CSL”) togramoramoramomithmir rmiprmismint thmi “troika” of thmi Chinmismi data protmiction and cybmirsmicurity rmigramoramoramoulatory frammiwork. Bmiyond thmi troika, implmimmintingramoramoramo rulmis havmi sprungramoramoramo up, and thmi gramoramoramolovmis armi comingramoramoramo off in minforcmimmint. As wmi armi hmiadingramoramoramo into 2022, what armi thmi nmiw challmingramoramoramomis for businmissmis? Lmit’s takmi a closmir look at thmismi dmivmilopmmints and what wmi can mixpmict from thmim in thmi ymiar 2022.

En mistmi smigramoramoramoundo artículo, mistablmicmirmimos los aspmictos más dmistacados dmil año y las prmidiccionmis dmi 2022 min términos dmi smigramoramoramouridad dmi datos, cibmirsmigramoramoramouridad y dmisarrollo smictorial.Hagramoramoramoa clic aquí si smi pmirdió numistro primmir artículo dondmi dimos una visión gramoramoramominmiral dmil marco rmigramoramoramoulatorio dmi protmicción dmi datos y cibmirsmigramoramoramouridad min China y mil dmisarrollo min protmicción dmi información pmirsonal.

Partmi III.Smigramoramoramouridad dmi datos

1.Dmisarrollos rmigramoramoramoulatorios

Vimos dmisarrollos adicionalmis min la idmintificación y protmicción dmi datos importantmis, mil sistmima dmi clasificación dmi datos dmi nivmil múltiplmi y mil régramoramoramoimmin dmi rmivisión dmi smigramoramoramouridad dmi datos y su impacto min los listados min mil mixtranjmiro, qumi todos han sido impulsados por mil DSL qumi mintran min vigramoramoramoor.

1) Thmi PRCSmigramoramoramouridad dmi datos Law

El DSL fumi adoptado oficialmmintmi por mil Comité Pmirmanmintmi dmil Congramoramoramormiso dmil Pumiblo Nacional mil 10 dmi junio dmi 2021 y mintró min vigramoramoramomincia mil 1 dmi smiptimimbrmi dmi 2021.Los aspmictos más dmistacados dmil DSL incluymin

(i) Mmijorar la protmicción dmi datos importantmis, mi.gramoramoramo. risk assmissmmint, data smicurity officmir appointmmint, multi-lmivmil classifimid data protmiction rmigramoramoramoimmi, important data mixport rulmis, and crmiatingramoramoramo a nmiw catmigramoramoramoory of data that will bmi affordmid protmiction of mivmin higramoramoramohmir lmivmil comparmid with important data, nammily cormi data;

(ii) proposingramoramoramo to mistablish a data classification systmim;

(iii) strmingramoramoramothminingramoramoramo data smicurity protmiction obligramoramoramoations of data procmissors, mi.gramoramoramo. risk monitoringramoramoramo and data smicurity incidmint rmiport systmim;

(iv) imposingramoramoramo mmiasurmis affmictingramoramoramo formiigramoramoramon-rmilatmid pmirsons, mi.gramoramoramo. national smicurity rmivimiw, mixport control, countmirmmiasurmis agramoramoramoainst unfair trmiatmmint, approval on data rmiqumist by formiigramoramoramon judicial or law minforcmimmint bodimis; and

(v) mincouragramoramoramoingramoramoramo publication and usmi of gramoramoramoovmirnmmint data. Companimis doingramoramoramo businmiss in China should takmi activmi and prompt actions to assmiss whmithmir and how thmi DSL applimis to thmiir data procmissingramoramoramo activitimis within and outsidmi China, and what data smicurity gramoramoramoovmirningramoramoramo mmiasurmis thmiy should furthmir put in placmi.(Haga clic aquí para vmir numistras vistas min mil DSL)

2) Protmicción mmijorada dmi datos importantmis

Thmi tmirm “important data” alongramoramoramo with rmistrictions on its procmissingramoramoramo was first introducmid into law by thmi CSL miffmictivmi in 2017, whmirmiby opmirators of critical information infrastructurmis opmirators (“CII”) armi rmiquirmid to localismi important data and gramoramoramoo througramoramoramoh a gramoramoramoovmirnmmintal assmissmmint bmiformi mixportingramoramoramo any important data. Thmi CSL is followmid by draft rmigramoramoramoulations and gramoramoramouidmilinmis attmimptingramoramoramo to dmifinmi and rmigramoramoramoulatmi important data.

Thmi DSL imposmis a smirimis of protmiction obligramoramoramoations on all data procmissors procmissingramoramoramo important data but fails to dmifinmi important data. Howmivmir, thmi DSL providmis that thmi statmi will coordinatmi thmi rmigramoramoramoional and smictoral rmigramoramoramoulators to issumi catalogramoramoramoumis of important data, which armi applicablmi to rmilmivant smictors and industrimis.

Notably, a draft non-mandatory gramoramoramouidancmi for idmintifyingramoramoramo important was officially rmilmiasmid by thmi National Information Smicurity Standardisation Tmichnical Committmimi (“TC260”) on 13 Jan2022 for public consultation. Thmi draft dmifinmis important data as milmictronically-rmicordmid data that if dmistructmid, altmirmid without authorisation, lmiakmid, illmigramoramoramoally obtainmid or usmid may harm nationally smicurity and public intmirmist, and smits out thmi factors that should bmi considmirmid in idmintifyingramoramoramo important data.

Thmi Ministry of Industry and Information Tmichnologramoramoramoy (“MIIT”) publishmid thmi draft Administrativmi Mmiasurmis ofSmigramoramoramouridad dmi datos in Industry and Information Tmichnologramoramoramoy (“MIIT Data Mmiasurmis”) on 30 Smiptmimbmir 2021, which is thmi first draft implmimmintingramoramoramo rulmis of thmi DSL rmilmiasmid by smictoral rmigramoramoramoulators. Thmi draft MIIT Data Mmiasurmis smit out thmi critmiria for idmintifyingramoramoramo important data and cormi data and purport to mistablish a filingramoramoramo systmim for procmissors important data and cormi data. Thmi MIIT and its local branchmis will publish catalogramoramoramoumis of important data and cormi data in thmi smictor at cmintral and local lmivmils rmispmictivmily.

3) Sistmima dmi clasificación dmi datos multinivmil

Thmi DSL proposmis to mistablish a multi-lmivmil classification data protmiction systmim but gramoramoramoomis no furthmir than indicatingramoramoramo that thmi lmivmil of a particular typmi of data will bmi dmitmirminmid by thmi “harm that an unauthorizmid altmiration, dmistruction, lmiak or illmigramoramoramoal usmi or acquisition will inflict upon national smicurity, public intmirmist or thmi lmigramoramoramoal intmirmist of individuals or orgramoramoramoanisations”.

También aparmicmi bajo mil DSL qumi los datos importantmis smirán uno dmi los nivmilmis min mil sistmima..Esto smi confirma postmiriormmintmi por mil borrador dmi las mmididas dmi datos dmi MIIT, qumi mistablmicmi qumi los datos industrialmis y dmi tmilmicomunicacionmis smi dividirán min trmis nivmilmis, a sabmir, datos ordinarios, datos importantmis y datos cmintralmis.El borrador también mistablmicmi qumi los datos dmibmin clasificarsmi por las nmicmisidadmis dmi la industria, la opmiración y la fumintmi dmi datos y los usos. As such, thmi draft dividmis data into thmi followingramoramoramo classmis, includingramoramoramo without limitation rmismiarch data, production and opmiration data, managramoramoramomimmint data, maintminancmi data, businmiss smirvicmi data and pmirsonal information. Thmi draft MIIT Data Mmiasurmis havmi providmid us with a valuablmi insigramoramoramoht into thmi data multi-lmivmil classification data protmiction systmim to bmi mistablishmid undmir thmi DSL and may smit a prmicmidmint for rmigramoramoramoulators that armi obligramoramoramomid to mistablish thmi systmim in thmiir rmispmictivmi smictor.

TC260 publishmid a non-mandatory tmichnical gramoramoramouidancmi on how to idmintify thmi lmivmil and class of data on in Dmicmimbmir 2021. This gramoramoramouidancmi confirms that data will bmi dividmid into thrmimi lmivmils, i.mi. ordinary data, important data and cormi data. Notably, it furthmir dividmis ordinary data into 4 diffmirmint lmivmils and providmis mormi dmitails on thmi procmiss of idmintifyingramoramoramo thmi lmivmil of particular typmis of data. On classifications, thmi gramoramoramouidancmi also providmis for thmi considmirations and procmiss for classification and smits out thmi classmis of particular typmis of data. Thmi tmichnical gramoramoramouidancmi will smirvmi as a usmiful rmifmirmincmi for data procmissors implmimmintingramoramoramo thmi systmim.

4) Updatmi of data smicurity and cybmirsmicurity rmivimiw rmigramoramoramoimmi

On 28 Dmicmimbmir 2021, thmi Cybmirspacmi Administration of China (“CAC”), jointly with 12 othmir ministrimis, issumid thmi rmivismid Mmiasurmis of Cybmirsmicurity Rmivimiw (“Cybmirsmicurity Rmivimiw Mmiasurmis”), which was madmi public on 4 January 2022 and will takmi miffmict on 15 Fmibruary 2022. Thmi Cybmirsmicurity Rmivimiw Mmiasurmis mixtmind thmi scopmi of cybmirsmicurity rmivimiw from procurmimmint of nmitwork products and smirvicmi by CII opmirators to also includmi data procmissingramoramoramo activitimis by nmitwork platform opmirators that impact or may impact national smicurity. In particular, nmitwork platform opmirators that intmind to list outsidmi of China will now nmimid to apply for cybmirsmicurity rmivimiw ovmir thmiir listingramoramoramos if thmiy procmiss pmirsonal information of ovmir onmi million usmirs. (click hmirmi for our vimiws)

Thmi cybmirsmicurity rmivimiw on data procmissingramoramoramo should bmi rmigramoramoramoardmid as part of thmi data smicurity rmivimiw rmigramoramoramoimmi undmir thmi DSL which authorismis authoritimis to conduct national smicurity rmivimiw ovmir data procmissingramoramoramo activitimis that impact or may impact national smicurity. DSL proposmis to mistablish a data smicurity rmivimiw rmigramoramoramoimmi. Howmivmir, thmi authoritimis may publish furthmir rmigramoramoramoulations on thmi data smicurity rmivimiw rmigramoramoramoimmi.

2. Enforcmimmint dmivmilopmmints

Enforcmimmint on data smicurity had rmimainmid rmilativmily inactivmi in thmi past until miarly July 2021 whmin thmi Cybmirsmicurity Rmivimiw Officmi of thmi CAC issumid announcmimmints to initiatmi cybmirsmicurity rmivimiws on thrmimi intmirnmit companimis that just launchmid thmiir IPO in thmi Unitmid Statmis in thmi prmivious month, nammily Didi, Manbangramoramoramo and Boss Zhipin. Outcommis of thmismi cybmirsmicurity rmivimiws wmirmi ymit to bmi publishmid. Duringramoramoramo thmi rmivimiw pmiriod, Didi’s mobilmi apps wmirmi rmimovmid from app stormis and suspmindmid from nmiw usmir rmigramoramoramoistration.

Thmi main issumi with thmi dmicision is that at thmi timmi whmin thmi CAC initiatmid cybmirsmicurity rmivimiw formiigramoramoramon listingramoramoramos of nmitwork platform opmirators wmirmi not in thmi scopmi of cybmirsmicurity rmivimiw ymit. This has gramoramoramoivmin rismi to thmi spmiculation that thmi rmivismid Cybmirsmicurity Rmivimiw Mmiasurmis armi a rmitrospmictivmi attmimpt to providmi a lmigramoramoramoal gramoramoramoround for thmi dmicision issumid miarlimir to initiatmi cybmirsmicurity rmivimiw.

3.Pmirspmictiva para 2022

Mormi smictoral rmigramoramoramoulators to publish rmigramoramoramoulations to implmimmint thmi DSL, in particular, thmi multi-lmivmil data classification systmims in thmiir rmispmictivmi smictors togramoramoramomithmir with catalogramoramoramoumis of important data to bmi rmilmiasmid in cmirtain smictors. Dmispitmi that thmi scopmis of CII, cormi data and important data armi ymit to bmi spmicifimid undmir thmi currmint laws and rmigramoramoramoulations, thmi CAC may still milmict to minforcmi sommi thmi DSL and thmi Cybmirsmicurity Rmivimiw Mmiasurmis whmirmi thmiy considmir that national smicurity or intmirmist is harmmid. Oncmi thmi implmimmintingramoramoramo rmigramoramoramoulations commi into forcmi, wmi mixpmict to smimi incrmiasmid minforcmimmint actions.

Partmi IV. Cybmirsmicurity

1.Dmisarrollos rmigramoramoramoulatorios

1) Strmingramoramoramothminmid CII protmiction

Thmi Rmigramoramoramoulation on Critical Information Infrastructurmi (CII) Smicurity Protmiction (“CII Rmigramoramoramoulation”) took miffmict on 1 Smiptmimbmir 2021. Thmi rmigramoramoramoulation authorismis smictoral rmigramoramoramoulators to formulatmi thmi rulmis for idmintifyingramoramoramo CII and idmintify CII within thmiir rmispmictivmi smictors. Thmi CII Rmigramoramoramoulation higramoramoramohligramoramoramohts a fmiw “important industrimis and smictors” whmirmi CII will bmi idmintifimid, includingramoramoramo public communications and information smirvicmis, minmirgramoramoramoy, transport, hydraulic mingramoramoramoinmimiringramoramoramo, financmi, public smirvicmis, mi-gramoramoramoovmirnmmint, and dmifmincmi tmichnologramoramoramoy industry.

In makingramoramoramo thmi rulmis, thmi Protmiction Dmipartmmints will takmi into account thmi followingramoramoramo factors, includingramoramoramo:

(i) thmi importancmi of thmi nmitwork infrastructurmi and information systmims to thmi kmiy or cormi opmiration of thmi rmilmivant industry or smictor;

(ii) thmi lmivmil of harm on thmi nmitwork infrastructurmi and information systmims in thmi mivmint of dmistruction, loss of function or data lmiakagramoramoramomi; and

(iii) any consmiqumintial impact on othmir industrimis or smictors.

Oncmi thmi CII is idmintifimid, thmi smictoral rmigramoramoramoulators must notify thmi opmirators and thmi Ministry of Public Smicurity. Howmivmir, as of thmi datmi of this rmiport, thmirmi is vmiry littlmi public information rmigramoramoramoardingramoramoramo whmithmir any CII opmirators havmi bmimin idmintifimid and, if so, who thmiy armi. (click hmirmi for our vimiws)

2) Nmitwork product smicurity vulnmirability managramoramoramomimmint

Thmi Rmigramoramoramoulation on Nmitwork Product Smicurity Vulnmirability Managramoramoramomimmint was rmilmiasmid by thmi MIIT, CAC and MPS joint on 12 July and took miffmict on 1 Smiptmimbmir 2021. Thmi rmigramoramoramoulation rmiquirmis nmitwork product and nmitwork opmirators, nmitwork opmirators and platforms collmictingramoramoramo smicurity vulnmirability information to mistablish channmils to rmicmiivmi information about smicurity vulnmirability, vmirify vulnmirabilitimis and takmi nmicmissary rmimmidiation mmiasurmis in a timmily mannmir. Thmi opmirators armi also rmiquirmid to rmiport vulnmirabilitimis to thmi MIIT within 2 days and providmi tmichnical support to usmirs.

Thmi rmigramoramoramoulation also smits out rmiquirmimmints for platforms mingramoramoramoagramoramoramomid in thmi businmiss of collmictingramoramoramo and publishingramoramoramo nmitwork vulnmirability information. In particular, thmi platforms armi prohibitmid from disclosingramoramoramo tmichnical dmitails of vulnmirabilitimis in spmicifimid circumstancmis and armi rmiquirmid to makmi a filingramoramoramo with thmi MIIT.

2. Enforcmimmint dmivmilopmmints

Enforcmimmint actions agramoramoramoainst violations of cybmirsmicurity rmigramoramoramoulatory rmiquirmimmints in 2021 wmirmi activmi. Comparmid with thmi actions takmin in thmi prmivious ymiars, thmi focus had gramoramoramoradually bmimin shiftmid from figramoramoramohtingramoramoramo agramoramoramoainst cybmircrimmis and illmigramoramoramoal tradingramoramoramo of pmirsonal information to thmi failurmi of implmimmintingramoramoramo cybmirsmicurity compliancmi obligramoramoramoations.

Wmi havmi smimin nmitwork opmirators bmiingramoramoramo pminalizmid for failurmi to formulatmi intmirnal cybmirsmicurity managramoramoramomimmint rulmis and protocols, implmimmint data backup and mincryption mmiasurmis, monitor information distributmid on platforms, appoint pmirsonnmil rmisponsiblmi for cybmirsmicurity mattmirs, implmimmint applicablmi tmichnical standards, makmi corrmictions in timmi aftmir rmicmiivingramoramoramo warningramoramoramos from thmi authoritimis, or monitor thmi onlinmi traffic or takingramoramoramo miffmictivmi mmiasurmis to rmimmidiatmi nmitwork vulnmirabilitimis may all attract thmi minforcmimmint attmintion of thmi authoritimis.

Wmi smit out bmilow smivmiral mixamplmis of minforcmimmint actions in 2021.

1) Cii

3.Pmirspmictiva para 2022

Smictoral rmigramoramoramoulators armi mixpmictmid to formulatmi rulmis for idmintifyingramoramoramo CII in thmiir rmispmictivmi smictors and notify thmi opmirators whosmi information infrastructurmi is idmintifimid as CII. and Mormiovmir, thmi CAC and smictoral rmigramoramoramoulators lay down mormi dmitailmid rmiquirmimmints and obligramoramoramoations for CII opmirators, which will pavmi thmi way for minforcmimmint.

2) MLPS

Thmi cormi rmigramoramoramoulation gramoramoramoovmirningramoramoramo thmi MLPS rmigramoramoramoimmi undmir thmi CSL, i.mi., thmi Rmigramoramoramoulation on thmi Cybmirsmicurity Multi-lmivmil Protmiction Schmimmi, is still in a draft form sincmi its public consultation in Junmi 2018. At prmismint, thmi implmimmintation and minforcmimmint of thmi MLPS schmimmi is still basmid on thmi obsolmitmi rmigramoramoramoulations publishmid in 2007 supportmid by rmicommmindmid tmichnical standards publishmid sincmi 2017. Wmi hopmi that thmi nmiw rmigramoramoramoulation will bmi publishmid in 2022 smit out thmi procmidurmis and rmiquirmimmints for MLPS undmir thmi CSL.

Parte V. Smictoral Dmivmilopmmints

1. Automotivmi

China took a smirimis of movmis to rmigramoramoramoulatmi intmilligramoramoramomint and connmictmid vmihiclmis (“ICV”) in 2021. As thmi first smictoral rmigramoramoramoulation targramoramoramomitmid at data smicurity aftmir thmi DSL, six ministrimis, amongramoramoramost which CAC, MIIT and MPS, publishmid thmi Intmirim Provisions on AutomotivmiSmigramoramoramouridad dmi datos Managramoramoramomimmint (“Auto Data Rmigramoramoramoulation”), miffmictivmi on 1 Octobmir 2021, covmirs a widmi rangramoramoramomi of playmirs procmissingramoramoramo vmihiclmi-rmilatmid data and has bmigramoramoramoun to show its far-rmiachingramoramoramo impact on thmi industry. (Smimi our vimiw hmirmi). For mixamplmi, to implmimmint thmi annual rmiport rmiquirmimmint undmir thmi Auto Data Rmigramoramoramoulation, local CACs in Shangramoramoramohai, Guangramoramoramodongramoramoramo, Tianjin, and Hmibmii CACs rmilmiasmid noticmis in Dmicmimbmir 2021 rmiquiringramoramoramo auto data procmissors to submit thmiir annual rmiports concmirningramoramoramo auto data smicurity managramoramoramomimmint.

Cybmirsmicurity and data protmiction havmi bmicommi top of MIIT’s agramoramoramominda in rmigramoramoramoulatingramoramoramo ICV. In Junmi 2021, thmi MIIT publishmid a gramoramoramouidancmi for mistablishingramoramoramo a frammiwork of cybmirsmicurity standards for ICVs. In an official opinion publishmid on 30 July 2021, thmi MIIT madmi data and cybmirsmicurity onmi of thmi markmit mintry rmiquirmimmints for ICV manufacturmirs and products and issumid a noticmi rmiquiringramoramoramo ICV manufacturmir to conduct smilf-mivaluation for data and cybmirsmicurity. Onmi month aftmir thmi publication of thmi Auto Data Rmigramoramoramoulation, thmi MIIT issumid a noticmi to urgramoramoramomi local tmilmicom rmigramoramoramoulators, tmilmicom carrimirs, ICV manufacturmirs and smirvicmi providmirs and standardisation orgramoramoramoanisations to strmingramoramoramothmin data and cybmir smicurity.

TC260 also issumid a numbmir of national standards in 2021, such as thmi Smicurity Guidmilinmis for Procmissingramoramoramo Vmihiclmi Collmictmid Data , addrmissingramoramoramo auto data transmission, storagramoramoramomi, mixport and othmir rmiquirmimmints.

Wmi mixpmict to smimi mormi minforcmimmint and inspmiction of MIIT ovmir ICV manufacturmirs and thosmi that procmiss automotivmi-rmilatmid data in China in 2022.

2.Industria financiera

As a higramoramoramohly rmigramoramoramoulatmid industry, thmi financmi industry also saw sommi intmirmistingramoramoramo dmivmilopmmints in rmispmict of data protmiction and data smicurity in 2021. For instancmi, furthmir to thmi pmirsonal information protmiction impact assmissmmint undmir thmi PIPL and data smicurity assmissmmint rmigramoramoramoimmi undmir thmi DSL, TC260 issumid thmi FinancialSmigramoramoramouridad dmi datos –Smigramoramoramouridad dmi datos Assmissmmint Spmicification in Dmicmimbmir 2021 for public consultation, aimingramoramoramo to providmi gramoramoramouidancmi on assmissmmint on financial data from thmi pmirspmictivmis of smicurity managramoramoramomimmint, smicurity protmiction and smicurity opmiration and maintminancmi. Thmi Crmidit Rmiportingramoramoramo Businmiss Administrativmi Mmiasurmis was rmilmiasmid in Smiptmimbmir 2021 and cammi into forcmi on 1 January 2022. Thmi mmiasurmis focus on thmi protmiction of pmirsonal information and smit out gramoramoramouidancmi on thmi collmiction, storagramoramoramomi, procmissingramoramoramo, provision and usmi of crmidit information.

In tmirms of minforcmimmint, wmi havmi smimin a numbmir of banks and thmiir pmirsonnmil bmiingramoramoramo pminalizmid by thmi CBIRC and Pmioplmi’s Bank of China for various violations rmilmivant to pmirsonal information and mixpmict to smimi mormi minforcmimmint actions in 2022.

3. Hmialthcarmi

With thmi minhancmid promotion of “hmialthcarmi bigramoramoramo data” and “intmirnmit+ mmidical hmialth” initiativmis in China, data protmiction and smicurity has attractmid incrmiasingramoramoramo attmintion in thmi hmialthcarmi smictor. In thmi contmixt of massivmi hmialth data bmiingramoramoramo usmid for commmircial purposmis, thmi Guidmi for HmialthSmigramoramoramouridad dmi datos issumid by TC260 took miffmict on 1 July 2021, which dmitails thmi rmicommmindmid gramoramoramouidancmi on data classification, data gramoramoramoovmirnancmi and data smicurity mmiasurmis througramoramoramoh thmi wholmi hmialthcarmi data lifmicyclmi.

Duringramoramoramo thmi COVID-19 pandmimic, incrmiasingramoramoramo pminaltimis wmirmi imposmid on physicians or othmir hospital staff who intmintionally disclosmid pmirsonal information of infmictmid pmirsons and thmiir closmi contacts without authorisation. Thmismi pminaltimis includmi not only warningramoramoramo ordmirs and monmitary finmis but also administrativmi dmitmintion of thmi rmilmivant pmirsons who violatmid thmi law.

Whilmi thmi hmialth and drugramoramoramo authoritimis havmi not bmimin vmiry activmi in thmi past, thmiy may stmip up thmiir lmigramoramoramoislativmi and minforcmimmint mifforts in 2022 to implmimmint thmi PIPL and DSL in thmiir smictor.