National Security Law
From my point of view, the National Security Law is quite clear, even though the administration doesn't seem to realise just how broad it is. Two provisions, taken together, make it risky to do any sort of information security: it allows covert surveillance by the national security department of the police (Article 43(6)), and interfering with the performance of duties of state power is an offence of Subversion (Article 22(3)). Suppose a user in your company is under surveillance, you run your anti-virus scanner and remove spyware from their machine... guess who goes to jail for Subversion? If you sourced the scanner from a foreign company, that might also be Collusion with a foreign power under Article 29.
As this law has worldwide jurisdiction, then researchers in the foreign company developing the scanner might also have committed an offence.
Oh, and as this would involve state secrets (there's no point in using a covert surveillance tool that isn't secret), the trial could be conducted in secret.
Don't worry, I'm sure the trial will be conducted to the highest standard of Chinese justice.
Biting the hand that feeds IT
