Article 64 Where, in violation of the third paragraph of Article 22 or Article 41, 42 or 43 of the Law, a network
operator or provider of any cyber product or service commits an infringement of any personal information
right that is legally protected, the competent authority shall order it to make rectification, and may,
depending on the circumstances of the case, impose on it separately or combined, a warning, the
confiscation of illegal gains, and a fine of between one and ten times the illegal gains, or a fine of up to CNY1
million if there is no illegal gain; impose a fine of between CNY10,000 and CNY100,000 on any directly liable
manager or any other directly liable person of the organization; and may, if the circumstances are serious,
order it to suspend the relevant business, suspend business for rectification, or close down the website, or
revoke its relevant business permit or its business license.
In the case of a theft of or otherwise illegal acquisition, or illegal sale or illegal provision of personal
information to another in violation of Article 44 of the Law that does not constitute a criminal offense, the
person committing the violation shall be confiscated of the illegal gains and subject to a fine of between one
and ten times the illegal gains or a fine of up to CNY1 million if there are no illegal gains by the public
security.
Article 65 Where operators of critical information infrastructures, in violation of Article 35 hereof, use
network products or services that have neither been examined for security nor passed the security
examination, they shall be ordered by the relevant competent departments to stop using such products or
services, and a fine of no less than one but no more than ten times the purchase amount shall be imposed;
as for the persons directly in charge or other directly responsible persons, a fine of no less than CNY10,000
but no more than CNY100,000 shall be imposed.
Article 66 Operators of critical information infrastructures who, in violation of Article 37 hereof, store
network data overseas, or provide network data overseas, the relevant competent departments shall order
them to effect rectification, give a warning, confiscate illegal gains, and impose a fine of no less than
CNY50,000 but no more than CNY500,000; and may order them to suspend relevant business, stop business
for rectification, close down the website, or revoke the relevant business permits or their business licenses;
as for the persons directly in charge or other directly responsible persons, a fine of no less than CNY10,000
but no more than CNY100,000 shall be imposed.
Article 67 For network operators who violate Article 46 hereof by creating a website or setting up a
communications group for illegal or criminal activities, or disclosing information by making use of the
network that relates to any illegal or criminal activity to be committed, if such activities do not constitute a
crime, public security organs shall put them into detention for up to five days and may, in addition, impose a
fine of no less than CNY10,000 but no more than CNY100,000; and if the circumstances are serious, such
operators shall be detained for no less than 5 days but no more than 15 days and may, in addition, be fined
no less than CNY50,000 but no more than CNY500,000. Websites and communication groups used for
conducting illegal and criminal activities shall be closed down.
Where an entity commits any of the violations stipulated in the preceding paragraph, public security organs
shall confiscate its illegal gains, impose a fine of no less than CNY100,000 but no more than CNY500,000, and
punish the persons directly in charge and the other directly responsible persons in accordance with the
provisions of the preceding paragraph.
Article 68 Network operators, who, in violation of Article 47 hereof, fail to stop transmitting or take disposal
measures to remove the information, or save relevant records regarding information that the relevant
departments prohibit from being published or transmitted, they shall be ordered to effect rectification and
be given a warning, and their illegal gains shall be confiscated by the relevant competent departments;
where the operators refuse to effect rectification or the circumstances are serious, a fine of no less than
CNY100,000 but no more than CNY500,000 shall be imposed, and they may be ordered to suspend relevant
business, stop business for rectification or close down the website, and the relevant business permits or their
business licenses may be revoked; as for the persons directly in charge and other directly responsible
11