Legal analysis: First of all, policy is policy and law is law. Policies will never have legal effect until they become law. Secondly, the policy has strong adaptability and can be adjusted at any time in the face of social changes, and the law is relatively stable. It can also be said that its development is lagging behind in some cases. Third, when there is a conflict between law and policy, the law shall prevail.
Legal basis: Article 7 of the Regulations of People's Republic of China (PRC) on the Security Protection of Computer Information Systems. No organization or individual may use computer information systems to engage in activities that endanger national interests, collective interests and citizens' legitimate interests, and may not endanger the security of computer information systems.