Measures for the Security Protection Administration of International Networking of Computer Information Networks

(1997年12月11日国务院批准　1997年12月16日公安部令第33号发布　根据2011年1月8日《国务院关于废止和修改部分行政法规的决定》修订)

(Approved by the State Council on December 11, 1997, promulgated by Order No. 33 of the Ministry of Public Security on December 16, 1997, revised in accordance with the Decision of the State Council on Abolishing and Amending Certain Administrative Regulations on January 8, 2011)

为了加强对计算机信息网络国际联网的安全保护，维护公共秩序和社会稳定，根据《中华人民共和国计算机信息系统安全保护条例》、《中华人民共和国计算机信息网络国际联网管理暂行规定》和其他法律、行政法规的规定，制定本办法。

These Measures are formulated in accordance with the Regulations of the People's Republic of China on the Security Protection of Computer Information Systems, the Interim Provisions of the People's Republic of China on the Administration of International Networking of Computer Information Networks, and other laws and administrative regulations, in order to strengthen the security protection of international networking of computer information networks and to maintain public order and social stability.

中华人民共和国境内的计算机信息网络国际联网安全保护管理，适用本办法。

These Measures apply to the security protection administration of international networking of computer information networks within the territory of the People's Republic of China.

公安部计算机管理监察机构负责计算机信息网络国际联网的安全保护管理工作。

The computer management and supervision institution of the Ministry of Public Security shall be responsible for the security protection administration of international networking of computer information networks.

公安机关计算机管理监察机构应当保护计算机信息网络国际联网的公共安全，维护从事国际联网业务的单位和个人的合法权益和公众利益。

The computer management and supervision institution of the public security organs shall protect the public security of international networking of computer information networks, and safeguard the legitimate rights and interests of units and individuals engaged in international networking business as well as the public interest.

任何单位和个人不得利用国际联网危害国家安全、泄露国家秘密，不得侵犯国家的、社会的、集体的利益和公民的合法权益，不得从事违法犯罪活动。

No unit or individual may use international networking to endanger national security, divulge state secrets, infringe upon the interests of the state, society, or collectives, or the legitimate rights and interests of citizens, or engage in illegal or criminal activities.

任何单位和个人不得利用国际联网制作、复制、查阅和传播下列信息：

No unit or individual may use international networking to produce, reproduce, browse, or disseminate the following information:

(一)煽动抗拒、破坏宪法和法律、行政法规实施的；

(1) Inciting resistance to or undermining the implementation of the Constitution, laws, and administrative regulations;

(二)煽动颠覆国家政权，推翻社会主义制度的；

(2) Inciting subversion of state power or overthrow of the socialist system;

(三)煽动分裂国家、破坏国家统一的；

(3) Inciting secession of the country or undermining national unity;

(四)煽动民族仇恨、民族歧视，破坏民族团结的；

(4) Inciting ethnic hatred or discrimination, or undermining ethnic unity;

(五)捏造或者歪曲事实，散布谣言，扰乱社会秩序的；

(5) Fabricating or distorting facts, spreading rumors, or disrupting social order;

(六)宣扬封建迷信、淫秽、色情、赌博、暴力、凶杀、恐怖，教唆犯罪的；

(6) Promoting feudal superstition, obscenity, pornography, gambling, violence, murder, or terror, or instigating crime;

(七)公然侮辱他人或者捏造事实诽谤他人的；

(7) Publicly insulting others or fabricating facts to defame others;

(八)损害国家机关信誉的；

(8) Damaging the credibility of state organs;

(九)其他违反宪法和法律、行政法规的。

(9) Other information that violates the Constitution, laws, or administrative regulations.

任何单位和个人不得从事下列危害计算机信息网络安全的活动：

No unit or individual may engage in the following activities that endanger the security of computer information networks:

(一)未经允许，进入计算机信息网络或者使用计算机信息网络资源的；

(1) Entering a computer information network or using computer information network resources without authorization;

(二)未经允许，对计算机信息网络功能进行删除、修改或者增加的；

(2) Deleting, modifying, or adding computer information network functions without authorization;

(三)未经允许，对计算机信息网络中存储、处理或者传输的数据和应用程序进行删除、修改或者增加的；

(3) Deleting, modifying, or adding data or application programs stored, processed, or transmitted in a computer information network without authorization;

(四)故意制作、传播计算机病毒等破坏性程序的；

(4) Intentionally producing or spreading destructive programs such as computer viruses;

(五)其他危害计算机信息网络安全的。

(5) Other activities that endanger the security of computer information networks.

用户的通信自由和通信秘密受法律保护。任何单位和个人不得违反法律规定，利用国际联网侵犯用户的通信自由和通信秘密。

Users' freedom and confidentiality of communication are protected by law. No unit or individual may violate legal provisions and use international networking to infringe upon users' freedom and confidentiality of communication.

从事国际联网业务的单位和个人应当接受公安机关的安全监督、检查和指导，如实向公安机关提供有关安全保护的信息、资料及数据文件，协助公安机关查处通过国际联网的计算机信息网络的违法犯罪行为。

Units and individuals engaged in international networking business shall accept the security supervision, inspection, and guidance of the public security organs, truthfully provide information, materials, and data files concerning security protection to the public security organs, and assist the public security organs in investigating and dealing with illegal and criminal acts committed through computer information networks connected to international networks.

国际出入口信道提供单位、互联单位的主管部门或者主管单位，应当依照法律和国家有关规定负责国际出入口信道、所属互联网络的安全保护管理工作。

The providers of international gateway channels and the competent departments or units of interconnection units shall, in accordance with laws and relevant state provisions, be responsible for the security protection administration of international gateway channels and the interconnected networks under their jurisdiction.

互联单位、接入单位及使用计算机信息网络国际联网的法人和其他组织应当履行下列安全保护职责：

Interconnection units, access units, and legal persons and other organizations using international networking of computer information networks shall perform the following security protection duties:

(一)负责本网络的安全保护管理工作，建立健全安全保护管理制度；

(1) Be responsible for the security protection administration of their own networks, and establish and improve security protection management systems;

(二)落实安全保护技术措施，保障本网络的运行安全和信息安全；

(2) Implement security protection technical measures to ensure the operational security and information security of their own networks;

(三)负责对本网络用户的安全教育和培训；

(3) Be responsible for security education and training for their network users;

(四)对委托发布信息的单位和个人进行登记，并对所提供的信息内容按照本办法第五条进行审核；

(4) Register units and individuals that entrust them to publish information, and review the content of the information provided in accordance with Article 5 of these Measures;

(五)建立计算机信息网络电子公告系统的用户登记和信息管理制度；

(5) Establish user registration and information management systems for electronic bulletin board systems on computer information networks;

(六)发现有本办法第四条、第五条、第六条、第七条所列情形之一的，应当保留有关原始记录，并在24小时内向当地公安机关报告；

(6) Upon discovering any of the circumstances listed in Articles 4, 5, 6, or 7 of these Measures, retain relevant original records and report to the local public security organ within 24 hours;

(七)按照国家有关规定，删除本网络中含有本办法第五条内容的地址、目录或者关闭服务器。

(7) In accordance with relevant state provisions, delete addresses or directories containing content listed in Article 5 of these Measures from their networks, or shut down servers.

用户在接入单位办理入网手续时，应当填写用户备案表。备案表由公安部监制。

When users go through the network access procedures at an access unit, they shall fill in a user registration form. The registration form shall be produced under the supervision of the Ministry of Public Security.

互联单位、接入单位、使用计算机信息网络国际联网的法人和其他组织(包括跨省、自治区、直辖市联网的单位和所属的分支机构)，应当自网络正式联通之日起30日内，到所在地的省、自治区、直辖市人民政府公安机关指定的受理机关办理备案手续。

Interconnection units, access units, and legal persons and other organizations using international networking of computer information networks (including units that network across provinces, autonomous regions, or municipalities directly under the Central Government and their subordinate branches) shall, within 30 days from the date the network is formally connected, go through the registration procedures at the designated accepting organ of the public security organ of the province, autonomous region, or municipality directly under the Central Government where they are located.

前款所列单位应当负责将接入本网络的接入单位和用户情况报当地公安机关备案，并及时报告本网络中接入单位和用户的变更情况。

The units mentioned in the preceding paragraph shall be responsible for reporting the access units and users connected to their networks to the local public security organ for registration, and promptly report any changes in the access units and users within their networks.

使用公用账号的注册者应当加强对公用账号的管理，建立账号使用登记制度。用户账号不得转借、转让。

Registrants of public accounts shall strengthen the management of public accounts and establish an account usage registration system. User accounts shall not be lent or transferred.

涉及国家事务、经济建设、国防建设、尖端科学技术等重要领域的单位办理备案手续时，应当出具其行政主管部门的审批证明。

When units in important fields such as state affairs, economic construction, national defense construction, and cutting-edge science and technology go through registration procedures, they shall provide the approval certificate from their competent administrative department.

前款所列单位的计算机信息网络与国际联网，应当采取相应的安全保护措施。

The computer information networks of the units mentioned in the preceding paragraph that are connected to international networks shall adopt corresponding security protection measures.

省、自治区、直辖市公安厅(局)，地(市)、县(市)公安局，应当有相应机构负责国际联网的安全保护管理工作。

The public security departments (bureaus) of provinces, autonomous regions, and municipalities directly under the Central Government, and the public security bureaus of prefectures (cities) and counties (cities) shall have corresponding institutions responsible for the security protection administration of international networking.

公安机关计算机管理监察机构应当掌握互联单位、接入单位和用户的备案情况，建立备案档案，进行备案统计，并按照国家有关规定逐级上报。

The computer management and supervision institution of the public security organs shall keep abreast of the registration status of interconnection units, access units, and users, establish registration archives, conduct registration statistics, and report to higher levels step by step in accordance with relevant state provisions.

公安机关计算机管理监察机构应当督促互联单位、接入单位及有关用户建立健全安全保护管理制度。监督、检查网络安全保护管理以及技术措施的落实情况。

The computer management and supervision institution of the public security organs shall supervise interconnection units, access units, and relevant users to establish and improve security protection management systems, and supervise and inspect the implementation of network security protection management and technical measures.

公安机关计算机管理监察机构在组织安全检查时，有关单位应当派人参加。公安机关计算机管理监察机构对安全检查发现的问题，应当提出改进意见，作出详细记录，存档备查。

When the computer management and supervision institution of the public security organs organizes security inspections, the relevant units shall send personnel to participate. The computer management and supervision institution of the public security organs shall propose improvement suggestions for problems discovered during security inspections, make detailed records, and keep them on file for future reference.

公安机关计算机管理监察机构发现含有本办法第五条所列内容的地址、目录或者服务器时，应当通知有关单位关闭或者删除。

When the computer management and supervision institution of the public security organs discovers addresses, directories, or servers containing content listed in Article 5 of these Measures, it shall notify the relevant units to shut them down or delete them.

公安机关计算机管理监察机构应当负责追踪和查处通过计算机信息网络的违法行为和针对计算机信息网络的犯罪案件，对违反本办法第四条、第七条规定的违法犯罪行为，应当按照国家有关规定移送有关部门或者司法机关处理。

The computer management and supervision institution of the public security organs shall be responsible for tracking and investigating illegal acts committed through computer information networks and criminal cases targeting computer information networks. For illegal or criminal acts violating Articles 4 or 7 of these Measures, they shall be transferred to the relevant departments or judicial organs for handling in accordance with relevant state provisions.

违反法律、行政法规，有本办法第五条、第六条所列行为之一的，由公安机关给予警告，有违法所得的，没收违法所得，对个人可以并处5000元以下的罚款，对单位可以并处1.5万元以下的罚款；情节严重的，并可以给予6个月以内停止联网、停机整顿的处罚，必要时可以建议原发证、审批机构吊销经营许可证或者取消联网资格；构成违反治安管理行为的，依照治安管理处罚法的规定处罚；构成犯罪的，依法追究刑事责任。

Whoever violates laws or administrative regulations and commits any of the acts listed in Articles 5 or 6 of these Measures shall be given a warning by the public security organ; if there are illegal gains, the illegal gains shall be confiscated; an individual may be concurrently fined not more than 5,000 yuan, and a unit may be concurrently fined not more than 15,000 yuan; if the circumstances are serious, a penalty of suspension of networking or shutdown for rectification for not more than six months may be imposed; when necessary, the original issuing or approving authority may be recommended to revoke the business license or cancel the networking qualification; if the act constitutes a violation of public security administration, punishment shall be imposed in accordance with the provisions of the Public Security Administration Punishments Law; if a crime is constituted, criminal liability shall be investigated in accordance with law.

有下列行为之一的，由公安机关责令限期改正，给予警告，有违法所得的，没收违法所得；在规定的限期内未改正的，对单位的主管负责人员和其他直接责任人员可以并处5000元以下的罚款，对单位可以并处1.5万元以下的罚款；情节严重的，并可以给予6个月以内的停止联网、停机整顿的处罚，必要时可以建议原发证、审批机构吊销经营许可证或者取消联网资格。

Whoever commits any of the following acts shall be ordered by the public security organ to make corrections within a time limit and given a warning; if there are illegal gains, the illegal gains shall be confiscated; if corrections are not made within the prescribed time limit, the person in charge of the unit and other directly responsible persons may be concurrently fined not more than 5,000 yuan, and the unit may be concurrently fined not more than 15,000 yuan; if the circumstances are serious, a penalty of suspension of networking or shutdown for rectification for not more than six months may be imposed; when necessary, the original issuing or approving authority may be recommended to revoke the business license or cancel the networking qualification:

(一)未建立安全保护管理制度的；

(1) Failing to establish a security protection management system;

(二)未采取安全技术保护措施的；

(2) Failing to adopt security protection technical measures;

(三)未对网络用户进行安全教育和培训的；

(3) Failing to conduct security education and training for network users;

(四)未提供安全保护管理所需信息、资料及数据文件，或者所提供内容不真实的；

(4) Failing to provide information, materials, or data files required for security protection management, or providing untrue content;

(五)对委托其发布的信息内容未进行审核或者对委托单位和个人未进行登记的；

(5) Failing to review the information content entrusted for publication or failing to register the entrusting units or individuals;

(六)未建立电子公告系统的用户登记和信息管理制度的；

(6) Failing to establish user registration and information management systems for electronic bulletin board systems;

(七)未按照国家有关规定，删除网络地址、目录或者关闭服务器的；

(7) Failing to delete network addresses, directories, or shut down servers in accordance with relevant state provisions;

(八)未建立公用账号使用登记制度的；

(8) Failing to establish a public account usage registration system;

(九)转借、转让用户账号的。

(9) Lending or transferring user accounts.

违反本办法第四条、第七条规定的，依照有关法律、法规予以处罚。

Whoever violates the provisions of Articles 4 or 7 of these Measures shall be punished in accordance with relevant laws and regulations.

违反本办法第十一条、第十二条规定，不履行备案职责的，由公安机关给予警告或者停机整顿不超过6个月的处罚。

Whoever violates the provisions of Articles 11 or 12 of these Measures and fails to perform registration duties shall be given a warning by the public security organ or a penalty of shutdown for rectification for not more than six months.

与香港特别行政区和台湾、澳门地区联网的计算机信息网络的安全保护管理，参照本办法执行。

The security protection administration of computer information networks connected to the Hong Kong Special Administrative Region and the regions of Taiwan and Macau shall be implemented with reference to these Measures.

本办法自1997年12月30日起施行。

These Measures shall come into force as of December 30, 1997.