The law also states that there should be a "mechanism of both in-process and ex-post supervision on commercial cryptography, which combines routine supervision with random inspection" (implying that the Chinese government should get access to encrypted servers).
According to the law, there must be a system for both ongoing and post-event oversight of commercial cryptography. This system involves regular checks alongside random audits. The implication is that the Chinese government should be able to access encrypted servers.