| Does anyone know the technical details of what Google would have needed to comply with in China? From my understanding, a lot of western companies do business in China via (51% local controlled) "Partners" that ostensibly run their infrastructure for them, and obviously have to abide by local regulation. This includes operating an "Information Security Management System" (a euphemism of a sort) that interfaces with the Ministry of Industry and Information Technology for auditable end-user access logs and content blocking. It seems this is governed by these standards, but I failed to dig up a copy of them. Is it true that any western company offering a mainland Chinese version of their product exposes these interfaces? YD/T 2248-2015 - 互联网数据中心和互联网接入服务信息安全管理系统技术要求 - Interface requirements of information security management system for Internet data center/Internet service provider YD/T 2406-2017 - 互联网数据中心和互联网接入服务信息安全管理系统及接口测试方法 - Test specifications of information security management system & interface for Internet data center/Internet service provider YD/T 3212-2017 - 内容分发网络服务信息安全管理系统接口规范 - Interface standard of information security management system for content delivery network service YD/T 3213-2017 - 内容分发网络服务信息安全管理系统及接口测试方法 - Test specifications of information security management system for content delivery network service YD/T 3214-2017 - 互联网资源协作服务信息安全管理系统接口规范 - Interface specification for information security management of Internet resource collaboration service YD/T 3215-2017 - 互联网资源协作服务信息安全管理系统及接口测试方法 - Test methods of information security management system for Internet resource collaboration service |