The CSL also has a laundry list of security requirements, some of which mirror the GDPR closely, though without the tight, prescriptive language of its EU equivalent. According to Article 21 of the CSL, businesses falling under the regulation must appoint personnel who will be responsible for network security, and implement security protocols according to network security guidelines set by the Chinese Government.