Administration Regulations of Cyber Security on Telecommunications Business Article 10

Where the cyber system software or maintenance system outsourced by the telecommunications enterprise for design or establishment is related to network system resources and users’ personal data and communication, the telecommunications enterprise shall notify the competent authority thereof in advance. The maintenance and operations works thereof shall be supervised by the personnel of the telecommunications equipment room throughout the process; all system connection instructions shall be fully recorded; and relevant records shall be retained for at least six months.Telecommunications enterprise shall not entrust any person（s）who can potentially harm the national security to establish or design the software of the cyber system relating to network system resources and users’ personal data and communication; or to maintain, operate and test the connection of remote systems.