《网络安全法》管什么？
What does China’s Cybersecurity Law require?
Name: ________________ Date: ________
在中国办手机卡、注册社交账号时，常常要先填身份证号，或者用手机号验证。这背后的一部重要法律，就是二〇一七年六月一日起施行的《网络安全法》。
这部法律主要规定了几件事。第一是“实名制”：网络运营者为用户提供上网、通话、发布信息等服务时，应当要求用户提供真实身份信息。第二是保护个人信息：企业收集信息要说明用途、取得同意，不得收集与服务无关的信息，更不得非法出售。第三是数据存储：关键信息基础设施（比如能源、交通、金融等领域的重要网络）的运营者在中国境内收集的个人信息和重要数据，原则上应当存储在境内；确需向境外提供的，要进行安全评估。
支持者认为，这部法律让网络诈骗和信息泄露有了明确的追责依据，普通用户的数据也多了一层保护。不少外国企业和商会则担心，数据必须留在境内会增加经营成本，一些条文的表述也比较宽泛，执行起来弹性很大。也有人权组织认为，实名制让人们难以匿名表达意见。
二〇二一年，《数据安全法》和《个人信息保护法》又先后施行。三部法律合在一起，构成了中国网络和数据管理的基本框架。
在你所在的国家，上网需要实名吗？
Key words
| Word | Pinyin | Meaning |
|---|---|---|
| 验证 | yànzhèng | to verify; to validate; verification |
| 通话 | tōnghuà | to talk on the phone; to call; phone call |
| 不得 | bùdé | must not; may not (formal) |
| 能源 | néngyuán | energy; energy source |
| 金融 | jīnróng | finance; banking |
| 存储 | cúnchǔ | to store; storage |
| 评估 | pínggū | evaluation; assessment; to evaluate; to assess |
| 则 | zé | then; whereas; in contrast (formal) |
| 社交 | shèjiāo | social interaction; social life |
| 施行 | shīxíng | to put into effect; to implement |
| 非法 | fēifǎ | illegal; unlawful |
| 境内 | jìngnèi | within the borders; domestic |
English (for the teacher)
In China, getting a SIM card or registering a social media account usually means first entering your ID number, or verifying with a phone number. Behind this is an important law: the Cybersecurity Law, in force since June 1, 2017.
The law sets out a few main things. The first is the “real-name system”: when network operators provide users with internet access, calls, posting and similar services, they must ask users for their true identity. The second is protecting personal information: companies collecting it must state what it is for and get consent, may not collect information unrelated to the service, and above all may not sell it illegally. The third is data storage: operators of critical information infrastructure (such as important networks in energy, transport and finance) should in principle store the personal information and important data they collect inside China inside China, and anything that truly must go abroad needs a security assessment.
Supporters say the law gives a clear legal basis for holding people responsible for online fraud and data leaks, and adds a layer of protection for ordinary users’ data. Many foreign companies and chambers of commerce, however, worry that keeping data inside China raises business costs, and that some provisions are worded broadly, leaving a lot of room in how they are enforced. Some human rights groups also argue that the real-name system makes it hard for people to express views anonymously.
In 2021 the Data Security Law and the Personal Information Protection Law came into force one after the other. Together, the three laws form the basic framework of how China governs networks and data.
In the country where you live, do you need your real name to go online?