Current-law scope and cautions
- MLPS level determination should follow the dedicated classification methodology (including GB/T 22240), not the GB/T 22239 baseline-control standard alone and not a two-checkbox matrix.
- Level 3 and above generally attract stronger filing/testing requirements, while cryptography assessment obligations depend on the system and applicable commercial-cryptography rules.
Use: This is a screening/estimation tool, not legal, tax, accounting or regulatory advice. Confirm the latest primary authority, regulator/exchange practice, local rules and transaction documents before acting.
