The law requires companies to store user data gathered or produced by "critical information infrastructure operators" within mainland China and to pass security reviews on their products.

"The definition of critical information infrastructure operators is too broad and ambiguous, so South Korea and other countries demanded China make clear the definition of the category and transparently implement the regulation," Jung Seok-jin, a senior KATS official, said. "Chinese officials have agreed that they won't require source codes and other important trade secrets when conducting safety inspection on products."

Global tech companies have expressed worries that the tight security law heightens the risk that the Chinese government could snoop on their user data and other secrets.

The WTO's TBT agreement aims to ensure that technical regulations, standards, and conformity assessment procedures are non-discriminatory and do not create unnecessary obstacles to trade. (Yonhap)