Enforcement Rules of the Classified National Security Information Protection Act Article 28

Classified information shall be stored and safeguarded as follows:(1)Classified information shall be stored and safeguarded in office area, and cannot be carried out from the office area without obtaining a prior approval from the head of the agency or his or her authorized official.(2)Classified information shall be stored separately from non-classified information, and shall be safeguarded according to their respective classification designation.(3)Classified information shall be stored and locked in safes or other metal vaults equipped with a security system.(4)Electronic classified information shall be stored in disks, CD, VCD or DVD, and safeguarded in accordance with the provisions set forth in the preceding three paragraphs. Electronic classified information stored in a database shall be secured by encryption authorized or approved by the competent government agency. No external access to a database containing classified information shall be allowed without prior verification and testing by the competent government agency.