This domain gathers the resource- and infrastructure-sector data regimes that sit on top of the general Data Security Law and Cybersecurity Law framework. It collects the instruments that energy companies, civil-aviation operators, and natural-resources data holders must observe in addition to the economy-wide rules: the National Energy Administration’s Measures for Data Security Management in the Energy Industry, the Ministry of Natural Resources’ Measures for Data Security Management in the Natural-Resources Field, and the Civil Aviation Administration of China’s technical requirements for civil-aviation data-security monitoring and early warning.
Each of these sectors handles data that bears directly on national and economic security — grid and generation data, surveying-and-mapping and geographic data, and aviation-operations data — so the sector rules emphasize “important data” cataloguing, classified-grading protection, supply-chain and outsourcing controls, and monitoring-and-early-warning duties calibrated to critical-infrastructure risk.