I read the follow-up blog post with details[1] as well as the actual Chinese regulation text[2]. The blog post seems to omit a lot of details and some claims are dubious.

I don’t have time to translate everything, but here’s an example quote from the blog post:

> The inspectors can fully access the system and they are permitted to copy any data they find. See Article 15.

Whereas Article 15 reads (even if you can’t read Chinese, Google Translate will probably do a reasonable job)

> ... look up and/or copy information on matters related to the audit and inspection of Internet security. ...

So this is quite vague (not really surprising for any regulation), but at face value the law doesn’t seem to say “fully access” or “any data”. Does this cover any data that has nothing to do with security? Ostensibly not. Realistically I’m not sure. Either way, citing the law with an exaggerated translation doesn’t promote confidence in the blog post.

[1] https://www.chinalawblog.com/2019/10/chinas-new-cybersecurit...

[2] http://www.gov.cn/gongbao/content/2018/content_5343745.htm

Edit: to be absolutely clear, I was only commenting on the part of the blog post with explicit citations. Most of the blog post speculates on intent and actual scope, but since those are speculative and don’t deal with the text of the law directly, the author is of course entitled to his own interpretations.