China ends anonymity on its internet

For years now, China’s government has been pushing internet users towards real-name registration for some internet services, with varying degrees of success. But with a new cybersecurity law that will go into effect on June 1, 2017, the government has officially stopped beating around the bush. If you want to get online in China, you’ll have to provide your real identity.

According to the new law:

Network operators handling network access […] shall require users to provide real identity information when signing agreements with users or confirming provision of services. Where users do not provide real identity information, network operators must not provide them with relevant services.

In other words, ISPs, wifi node operators, and any other company that provides internet access will need to confirm your real identity before they can let you online. All network operators are also required to cooperate with police and state security organizations by handing over records if requested.

Companies that fail to do this, according to the law, are subject to fines of between US$7,300 and US$73,000, temporary or permanent suspensions of their websites or their entire business, and cancellation of operating licenses. Specific individuals within the companies found to be responsible may also be fined between US$1,500 and US$15,000.

In addition to internet access providers, other services including social media and messaging services will be subject to the same laws and penalties.

China, in other words, wants everything every user does online tied to their real identity. No more anonymity anywhere. Of course, there will still be ways to circumvent this system, especially for tech-savvy users. And since many users already have their real identities tied to the internet services they use most (like WeChat), the law may not feel like a major change to many. But it’s a clear sign that the days of anonymity on the internet – well, China’s internet – are well and truly gone.

Trouble for foreign companies

The new cybersecurity law also looks set to make trouble for foreign companies. Companies that work in strategically important sectors must store all of their data in China and submit to security reviews conducted by the government. The law defines China’s strategic sectors very broadly, meaning that everyone from transportation companies to online finance firms will be subject to the new rules. And it’s not yet clear precisely what these security reviews will entail. Some foreign firms are concerned that they’ll be required to hand over the source code for all of their products.

China did include source-code-disclosure provisions in previous drafts of the law, but removed them in the face of international objections. The law that was just recently passed makes no direct mention of source code disclosure.