计算机信息网络国际联网安全保护管理办法Computer Information Network and Internet Security, Protection and Management Regulations (1997年12月11日国务院批准, 1997年12月30日公安部发布) (Approved by the State Council on December 11, 1997 and promulgated by the Ministry of Public Security on December 30, 1997) 第一章 总 则 Chapter I. Comprehensive Regulations 第一条 为了加强对计算机信息网络国际联网的安全保护,维护公共秩序和社会稳定,根据《中华人民共和国计算机信息系统安全保护条例》、《中华人民共和国计算机信息网络国际联网管理暂行规定》和其他法律、行政法规的规定,制定本办法。 Article 1.In order to strengthen the security and the protection of computer information networks and of the Internet, and to preserve the social order and social stability, these regulations have been established on the basis of the "PRC Computer Information Network Protection Regulations", the "PRC Temporary Regulations on Computer Information Networks and the Internet" and other laws and administrative regulations. 第二条 中华人民共和国境内的计算机信息网络国际联网安全保护管理,适用本办法。 Article 2.The security, protection and management of all computer information networks within the borders of the PRC fall under these regulations. 第三条 公安部计算机管理监察机构负责计算机信息网络国际联网的安全保护管理工作。 Article 3.The computer management and supervision organization of the Ministry of Public Security is responsible for the security, protection and management of computer information networks and the Internet. 公安机关计算机管理监察机构应当保护计算机信息网络国际联网的公共安全,维护从事国际联网业务的单位和个人的合法权益和公众利益。 The Computer Management and Supervision organization of the Ministry of Public Security should protect the public security of computer information networks and the Internet as well as protect the legal rights of Internet service providing units and individuals as well as the public interest. 第四条 任何单位和个人不得利用国际联网危害国家安全、泄露国家秘密,不得侵犯国家的、社会的、集体的利益和公民的合法权益,不得从事违法犯罪活动。 Article 4.No unit or individual may use the Internet to harm national security, disclose state secrets, harm the interests of the State, of society or of a group, the legal rights of citizens, or to take part in criminal activities. 第五条 任何单位和个人不得利用国际联网制作、复制、查阅和传播下列信息: Article 5.No unit or individual may use the Internet to create, replicate, retrieve, or transmit the following kinds of information: (一) 煽动抗拒、破坏宪法和法律、行政法规实施的; (1) Inciting to resist or breaking the Constitution or laws or the implementation of administrative regulations; (二) 煽动颠覆国家政权,推翻社会主义制度的; (2) Inciting to overthrow the government or the socialist system; (三) 煽动分裂国家、破坏国家统一的; (3) Inciting division of the country, harming national unification; (四) 煽动民族仇恨、民族歧视,破坏民族团结的; (4) Inciting hatred or discrimination among nationalities or harming the unity of the nationalities; (五) 捏造或者歪曲事实,散布谣言,扰乱社会秩序的; (5) Making falsehoods or distorting the truth, spreading rumors, destroying the order of society; (六) 宣扬封建迷信、淫秽、色情、赌博、暴力、凶杀、 恐怖,教唆犯罪的; (6) Promoting feudal superstitions, sexually suggestive material, gambling, violence, murder; (七) 公然侮辱他人或者捏造事实诽谤他人的; (7) Terrorism or inciting others to criminal activity; openly insulting other people or distorting the truth to slander people; (八) 损害国家机关信誉的; (8) Injuring the reputation of state organs; (九) 其他违反宪法和法律、行政法规的。 (9) Other activities against the Constitution, laws or administrative regulations. 第六条 任何单位和个人不得从事下列危害计算机信息网络安全的活动: Article 6.No unit or individual may engage in the following activities which harm the security of computer information networks: (一) 未经允许,进入计算机信息网络或者使用计算机信息网络资源的; (1) No-one may use computer networks or network resources without getting proper prior approval (二) 未经允许,对计算机信息网络功能进行删除、修改或者增加的; (2) No-one may without prior permission may change network functions or to add or delete information (三) 未经允许,对计算机信息网络中存储、处理或者传输的数据和应用程序进行删除、修改或者增加的; (3) No-one may without prior permission add to, delete, or alter materials stored, processed or being transmitted through the network. (四) 故意制作、传播计算机病毒等破坏性程序的; (4) No-one may deliberately create or transmit viruses. (五) 其他危害计算机信息网络安全的。 (5) Other activities which harm the network are also prohibited. 第七条 用户的通信自由和通信秘密受法律保护。任何单位和个人不得违反法律规定,利用国际联网侵犯用户的通信自由和通信秘密。 Article 7.The freedom and privacy of network users is protected by law. No unit or individual may, in violation of these regulations, use the Internet to violate the freedom and privacy of network users. 第二章 安全保护责任 Chapter II. Responsibility for Security and Protection 第八条 从事国际联网业务的单位和个人应当接受公安机关的安全监督、检查和指导,如实向公安机关提供有关安全保护的信息、资料及数据文件,协助公安机关查处通过国际联网的计算机信息网络的违法犯罪行为。 Article 8.Units and individuals engaged in Internet business must accept the security supervision, inspection, and guidance of the Public Security organization. This includes providing to the Public Security organization information, materials and digital document, and assisting the Public Security organization to discover and properly handle incidents involving law violations and criminal activities involving computer information networks. 第九条 国际出入口信道提供单位、互联单位的主管部门或者主管单位,应当依照法律和国家有关规定负责国际出入口信道、所属互联网络的安全保护管理工作。 Article 9.The supervisory section or supervisory units of units which provide service through information network gateways through which information is imported and exported and connecting network units should, according to the law and relevant state regulations assume responsibility for the Internet network gateways as well as the security, protection, and management of the subordinate networks. 第十条 互联单位、接入单位及使用计算机信息网络国际联网的法人和其他组织应当履行下列安全保护职责: Article 10.Connecting network units, entry point units and corporations that use computer information networks and the Internet and other organizations must assume the following responsibilities for network security and protection: (一) 负责本网络的安全保护管理工作,建立健全安全保护管理制度; (1) Assume responsibility for network security, protection and management and establish a thoroughly secure, protected and well managed network; (二) 落实安全保护技术措施,保障本网络的运行安全和信息安全; (2) Carry out technical measures for network security and protection. Ensure network operational security and information security; (三) 负责对本网络用户的安全教育和培训; (3) Assume responsibility for the security education and training of network users; (四) 对委托发布信息的单位和个人进行登记,并对所提供的信息内容按照本办法第五条进行审核; (4) Register units and individuals to whom information is provided. Provide information according to the stipulations of article five; (五) 建立计算机信息网络电子公告系统的用户登记和信息管理制度; (5) Establish a system for registering the users of electronic bulletin board systems on the computer information network as well as a system for managing bulletin board information; (六) 发现有本办法第四条、第五条、第六条、第七条所列情形之一的,应当保留有关原始记录,并 在二十四小时内向当地公安机关报告 ; (6) If a violation of articles four, five, six or seven is discovered than an unaltered record of the violation should be kept and reported to the local Public Security organization; (七) 按照国家有关规定,删除本网络中含有本办法第五条内容的地址、目录或者关闭服务器。 (7) According to the relevant State regulations, remove from the network and address, directory or server which has content in violation of article five. 第十一条 用户在接入单位办理入网手续时, 应当填写用户备案表。备案表由公安部监制。 Article 11.The network user should fill out a user application form when applying for network services. The format of this application form is determined by Public Security. 第十二条 互联单位、接入单位、使用计算机信息网络国际联网的法人和其他组织 (包括跨省、自治区、直辖市联网的单位和所属的分支机构),应当自网络正式联通之日起三十日内,到所在地的省、自治区、直辖市人民政府公安机关指定的受理机关办理备案手续。 Article 12.Connecting network units, entry point units, and corporations that use computer information networks and the Internet and other organizations (including connecting network units that are inter-provincial, autonomous region, municipalities directly under the Central Government or the branch organization of these units) should, within 30 days of the opening of network connection, carry out the proper registration procedures with a unit designated by the Public Security organization of the provincial, autonomous region, or municipality directly under the Central Government peoples' government. 前款所列单位应当负责将接入本网络的接入单位和用户情况报当地公安机关备案,并及时报告本网络中接入单位和用户的变更情况。 The units mentioned above have the responsibility to report for the record to the local public security organization information on the units and individuals which have connections to the network. The units must also report in a timely manner to Public Security organization any changes in the information about units or individuals using the network. 第十三条 使用公用帐号的注册者应当加强对公用帐号的管理,建立帐号使用登记制度。用户帐号不得转借、转让。 Article 13.People who register public accounts should strengthen their management of the account and establish an account registration system. Accounts may not be lent or transferred. 第十四条 涉及国家事务、经济建设、国防建设、尖端科学技术等重要领域的单位办理备案手续时,应当出具其行政主管部门的审批证明。 Article 14.Whenever units involved in matters such as national affairs, economic construction, building the national defense, and advanced science and technology are registered, evidence of the approval of the chief administrative section should be shown. 前款所列单位的计算机信息网络与国际联网,应当采取相应的安全保护措施。 Appropriate measures should be taken to ensure the security and protection of the computer information network and Internet network links of the units mentioned above. 第三章 安全监督 Chapter III. Security and Supervision 第十五条 省、自治区、直辖市公安厅(局),地(市)、县(市)公安局,应当有相应机构负责国际联网的安全保护管理工作。 Article 15.The provincial, autonomous region or municipal Public Security agency or bureau, as well as city and county Public Security organizations should have appropriate organizations to ensure the security, protection and management of the Internet. 第十六条 公安机关计算机管理监察机构应当掌握互联单位、接入单位和用户的备案情况,建立备案档案,进行备案统计,并按照国家有关规定逐级上报。 Article 16.The Public Security organization computer management and supervision organization should have information on the connecting network units, entry point unit, and users, establish a filing system for this information, maintain statistical information on these files and report to higher level units as appropriate. 第十七条 公安机关计算机管理监察机构应当督促互联单位、接入单位及有关用户建立健全安全保护管理制度。 Article 17.The Public Security computer management and supervision organization should have establish a system for ensuring the security, protection and good management of the connecting network units, entry point unit, and users. 监督、检查网络安全保护管理以及技术措施的落实情况。 The Public Security organization should supervise and inspect network security, protection and management and the implementation of security measures. 第十八条 公安机关计算机管理监察机构发现含有本办法第五条所列内容的地址、目录或者服务器时,应当通知有关单位关闭 或者删除。 Article 18.If the Public Security computer management and supervision organization discovers an address, directory or server with content in violation of Article 5, then the appropriate units should be notified to close or delete it. 第十九条 公安机关计算机管理监察机构应当负责追踪和查处通过计算机信息网络的违法行为和针对计算机信息网络的犯罪案件,对违反本办法第四条、第七条规定的违法犯罪行为,应当按照国家有关规定移送有关部门或者司法机关处理。 Article 19.The Public Security computer management and supervision organization is responsible for pursuing and dealing with illegal computer information network activities and criminal cases involving computer information networks. Criminal activities in violation of Article 4 or Article 7 should according to the relevant State regulations, be handed over to the relevant department or to the legal system for appropriate disposition. 第四章 法律责任 Chapter IV. Legal Responsibility 第二十条 违反法律、行政法规,有本办法第五条、第六条所列行为之一的,由公安机关给予警告,有违法所得的,没收违法所得,对个人可以并处五千元以下的罚款,对单位可以并处一万五千元以下的罚款; Article 20.For violations of law, administrative regulations or of Article 5 or Article 6 of these regulations, the Public Security organization gives a warning and if there income from illegal activities, confiscates the illegal earnings. A fine not to exceed 5000 RMB to individuals and 15,000 RMB to work units may be assessed. 情节严重的,并可以给予六个月以内停止联网、停机整顿的处罚,必要时可以建议原发证、审批机构吊销经营许可证或者取消联网资格; For serious offenses computer and network access can be closed down for up to six months, and if necessary Public Security can suggest that the business operating license of the concerned unit or the cancellation of its network registration. 构成违反治安管理行为的,依照治安管理处罚条例的规定处罚;构成犯罪的,依法追究刑事责任。 Activities contravening public security management regulations are punishable in accordance with provisions of the public security management penalties articles. Where crimes have occurred, prosecutions for criminal responsibility should be made. 第二十一条 有下列行为之一的,由公安机关责令限期改正,给予警告,有违法所得的,没收违法所得; Article 21.Where one of the activities listed below has occurred, the Public Security organization should order that remedial action should be taken with a specific period and give a warning; if there has been illegal income, the income should be confiscated; 在规定的限期内未改正的,对单位的主管负责人员和其他直接责任人员可以并处五千元以下的罚款,对单位可以并处一万五千元以下的罚款; if remedial action is not taken within the specified period, then a fine of not more than 5000 RMB may be assessed against the top management personnel in charge of the area and other persons directly responsible [for the violation] and a fine of not more than 15,000 RMB against the unit; 情节严重的,并可以给予六个月以内的停止联网、停机整顿的处罚,必要时可以建议原发证、审批机构吊销经营许可证或 者取消联网资格。 in the case of serious offenses, the network and equipment can be closed for up to six months. If necessary Public Security may suggest that the business license of the organization be canceled and its network registration canceled. (一) 未建立安全保护管理制度的; (1) Not establishing a management system for network security and protection; (二) 未采取安全技术保护措施的; (2) Not implementing security techniques and protection measures; (三) 未对网络用户进行安全教育和培训的; (3) Not providing security education and training for network users; (四) 未提供安全保护管理所需信息、资料及数据文件, 或者所提供内容不真实的; (4) Not providing information, materials or electronic documentation needed for security, protection and management or providing false information; (五) 对委托其发布的信息内容未进行审核或者对委托单 位和个人未进行登记的; (5) Not inspecting the content of information released on behalf of someone else or not registering the unit or individual on whose behalf the information was released; (六) 未建立电子公告系统的用户登记和信息管理制度的 ; (6) Not establishing a system for registering users and managing the information of electronic bulletin boards; (七) 未按照国家有关规定,删除网络地址、目录或者关闭服务器的; (7) Not removing web addresses and directories or not closing servers according to the relevant state regulations; (八) 未建立公用帐号使用登记制度的; (8) Not establishing a system for registering users of public accounts; (九) 转借、转让用户帐号的。 (9) Lending or transferring accounts. 第二十二条 违反本办法第四条、第七条规定 的,依照有关法律、法规予以处罚。 Article 22.Violation of Article 4 or Article 7 of these regulations shall be punished according to the relevant laws and regulations. 第二十三条 违反本办法第十一条、第十二条规定,不履行备案职责的,由公安机关给予警告或者停机整顿不超过六个月的处罚。 Article 23.Violations of Article 11 or Article 12 of these regulations or not fulfilling the responsibility or registering users shall be punished by a warning from Public Security or suspending network operations for six months. 第五章 附 则 Chapter V. Additional Regulations 第二十四条 与香港特别行政区和台湾、澳门地区联网的计算机信息网络的安全保护管理,参照本办法执行。 Article 24.These regulations should be consulted with regards to the implementation of the security, protection and management of computer information networks connecting to networks in the Hong Kong Special Administrative Region as well as with networks in the Taiwan and Macao districts. 第二十五条 本办法自发布之日起施行。 Article 25.These regulations go into effect on the day of promulgation. |