1. In importation and exportation of civil cryptographic products in the list of civil cryptographic products to be imported and exported under permits, the company shall hold a permit for importation and exportation of civil cryptographic products that is granted by competent state bodies. 2. A company shall be granted a permit for importation and exportation of civil cryptographic products if it meets the conditions as follows: a) It holds a business license for trading in civil cryptographic products; b) The civil cryptographic product to be imported is certified and announced of norm conformity as set forth in Article 39 hereof; c) The subject and purpose of using the civil cryptographic product do not cause damages to national defense, security and social discipline and safety. 3. The application for obtaining a permit for importation and exportation of civil cryptographic products shall include: a) Request for the permit for importation and exportation of civil cryptographic products; b) Copy of the business license for trading in civil cryptographic products and services; c) Copy of the norm conformity certificate on the imported civil cryptographic product. 4. Within 10 working days as of receipt of sufficient documents, the Government Cipher Committee shall examine and grant the company a permit for importation and exportation of civil cryptographic product; any rejection shall be noticed in writing, clearly giving out the reasons thereof. 5. The Government shall issue the list of civil cryptographic products to be imported and exported under permits and detailed regulations on this Article. Article 35. Responsibilities of companies trading in civil cryptographic products and services 1. Management of documents and materials relating to technical and engineering solutions of products. 2. Making, storing and keeping secret of client information such as name, type, quantity, and purpose of use of civil cryptographic products and services. 3. Annually reporting to the Government Cipher Committee on their business, importation and exportation of civil cryptographic products and services and a summary of client information before 31 December every year. 4. Taking measures to ensure security and safety during transport and storage of civil cryptographic products. 5. Refusing to provide civil cryptographic products and services when detecting of the relevant organization, individual’s violation of laws on use of civil cryptographic products and services, or violation of agreed undertakings on use of the product or service provided by the company. 6. Suspending or ceasing the provision of civil cryptographic products and services in order to ensure national defense and security, social discipline and order upon request of competent state bodies. 14