The classification screen

4 questions before you choose the route.

This page identifies the right question and evidence. It does not determine the legal outcome on a reader’s facts.

01

Are you a network operator?

Almost any company running systems in China.

Operator
02

Is the system CII?

CII identification is a separate, heavier track.

CII
03

What MLPS class is realistic?

Resolve the what mlps class is realistic question separately before choosing the route.

Class
04

Incident or PIPL overlap?

Breach notice may implicate CSL, PIPL and sector rules.

Incident

Working rule: CSL applies to the construction, operation, maintenance and use of networks in the PRC. Network operators have security, incident, and (for CII) supply-chain and localisation-adjacent duties.

What changes the answer

The signal ledger.

These facts move the question beyond a label and into a product, money-flow and control analysis.

Signal
Ask the operating question
Why it changes the route
PIPL-only programme
Did you skip MLPS because you have a privacy policy?
Different statute, different regulator set.
Class 2 forever
Are you self-grading everything as class 2 to avoid filing?
Class is a fact pattern, not a preference.
Global ISO 27001
Is ISO treated as MLPS?
ISO helps evidence; it is not a filing.
Prepare before you escalate

Bring a compact evidence docket—not a pitch deck.

Give a compliance team or counsel the operating facts that reveal the perimeter.

01System inventoryNetworks and apps hosted or operated in the PRC.
02Prior MLPS reportsOld class, filing number, test house.
03CII correspondenceAny identification notice.
Common confusions

Questions people ask before they build.

Short answers for orientation. The right result can change with the service model and current rules.

Do all companies need MLPS class 3?

No. Many commercial systems sit at class 2; class 3 is common for significant systems. Do not guess.

Is CSL the same as PIPL?

No. CSL is network security; PIPL is personal information.

Primary authorities

Reviewed sources support orientation, not a fact-specific assessment.