image

Cybersecurity

US flags fears over China’s new VPN rules with the World Trade Organisation

Washington says cross-border businesses such as travel agencies could be affected by the restrictions

PUBLISHED : Saturday, 24 February, 2018, 1:11pm
UPDATED : Saturday, 24 February, 2018, 10:45pm

The United States told the World Trade Organisation on Friday that Chinese internet access rules coming into force next month appeared to create significant new restrictions for cross-border service suppliers and should be discussed at the WTO.

“The United States urges China to address these concerns quickly and pursue new policies that promote rather than disrupt cross-border transfers of information and trade in services,” it said in a statement to the WTO’s Services Council.

In January last year, China published a circular on “Cleaning up and Regulating the Internet Access Service Market”, which seemed to put new restrictions on virtual private networks (VPNs) and leased lines, it said.

China hits back at German diplomat’s claims it is avoiding talks on cybersecurity, VPNs

VPNs can be used to access websites that are banned in China, which aggressively censors the internet, blocking sites it thinks could challenge the rule of the Communist Party or threaten stability.

The circular would expressly ban VPNs or leased lines from connecting data centres inside and outside China, the US statement said.

It gave examples of services that might be affected, such as travel agents in China accessing international flight information, or clients using text messages to access technical support or customer service based abroad.

VPNs were also a key mechanism to ensure the security and confidentiality of data flows, it added.

WTO rules required that any measure affecting telecommunications networks should be notified to the WTO by China, which should consult affected WTO members, it said.

“Since this measure is due to enter into force by March 31, 2018, we request that China expeditiously respond to these questions and concerns,” the United States said.

Washington raised concerns in September about China’s cybersecurity law, asking Beijing not to enforce it until it addressed the risk of it disrupting, deterring or prohibiting cross-border transfers of information.

Man jailed for 5½ years, fined US$76,000 for selling VPN in southern China

Friday’s statement said concern in the foreign business community remained high, and there were other more effective ways of achieving legitimate policy objectives without disrupting commerce.

“US industry is particularly concerned that the measures contemplated by China would disrupt communications between a company’s China facilities and its other global operations, increase costs, and reduce rather than enhance data security.”

The US statement said China had not provided any assurance that it would resolve concerns about the cybersecurity law.