Chapter VI Legal Liability
Article 65
Translation Notice
This is an unofficial English translation prepared for general informational purposes only. It does not constitute legal advice. In case of any discrepancy, the official Chinese text published by the competent authority shall prevail.
本文为非官方英文翻译，仅供一般信息参考，不构成法律意见。如与主管机关发布的中文正式文本不一致，以中文正式文本为准。
Chinese Original
第六十五条 违反本法第二十八条规定，开展网络安全认证、检测、风险评估等活动，或者向社会发布系统漏洞、计算机病毒、网络攻击、网络侵入等网络安全信息的，由有关主管部门责令改正，给予警告，可以处一万元以上十万元以下罚款；拒不改正或者情节严重的，处十万元以上一百万元以下罚款，并可以责令暂停相关业务、停业整顿、关闭网站或者应用程序、吊销相关业务许可证或者吊销营业执照，对直接负责的主管人员和其他直接责任人员处一万元以上十万元以下罚款。 有前款行为，造成本法第六十一条第三款规定的后果的，依照该款规定处罚。 单位有前款行为的，由公安机关没收违法所得，处十万元以上一百万元以下罚款，并对直接负责的主管人员和其他直接责任人员依照前款规定处罚。 违反本法第二十九条规定，受到治安管理处罚的人员，五年内不得从事网络安全管理和网络运营关键岗位的工作；受到刑事处罚的人员，终身不得从事网络安全管理和网络运营关键岗位的工作。
English Translation
Where Article 28 of this Law is violated by carrying out cybersecurity certification, testing, risk assessment, or similar activities, or by publishing to society cybersecurity information such as system vulnerabilities, computer viruses, network attacks, or network intrusions, the relevant competent department shall order correction, give a warning, and may impose a fine of not less than RMB 10,000 and not more than RMB 100,000. Where correction is refused or the circumstances are serious, a fine of not less than RMB 100,000 and not more than RMB 1,000,000 shall be imposed, and the relevant business may be ordered to suspend, the business may be suspended for rectification, the website or application may be closed, the relevant business permit may be revoked, or the business license may be revoked; the directly responsible person in charge and other directly responsible personnel shall be fined not less than RMB 10,000 and not more than RMB 100,000. Where the conduct described in the preceding paragraph causes the consequences provided in Article 61, paragraph 3, of this Law, punishment shall be imposed in accordance with that paragraph. Where an entity engages in the conduct described in the preceding paragraph, the public security organ shall confiscate unlawful gains, impose a fine of not less than RMB 100,000 and not more than RMB 1,000,000, and punish the directly responsible person in charge and other directly responsible personnel in accordance with the preceding paragraph. Where Article 29 of this Law is violated, personnel who receive public security administration punishment shall not engage in cybersecurity management or key network operation positions for five years; personnel who receive criminal punishment shall be prohibited for life from engaging in cybersecurity management or key network operation positions.
Free web reference version. Editable bilingual Word/PDF/Excel packages may be provided separately after editorial review.