China Data Security Law (DSL) 40: Art. 40 Entrusting e-government systems or government data: strict approval, supervision, and the entrusted party's duties

Where a state organ entrusts others to build or maintain e-government systems or to store or process government data, it goes through strict approval procedures and supervises the entrusted party's performance of data security obligations; the entrusted party performs those obligations under the laws, regulations and the contract and may not retain, use, divulge or provide government data to others without authorisation.