The finalized regulations include an adjusted definition for “important data.”
Local and sectoral regulators will still have the power to create their own important data catalogs under the guidance of national classification standards.
Ambiguous national security provisions in the regulations have heightened concern about stricter security reviews, a sentiment reinforced by recent scrutiny on a US chipmaker.