Data Security Policy · Full chronicle and history

On October 16, the Ministry of Commerce and the Ministry of Science and Technology released a draft revision of the technology export catalogue, proposing to add 14 categories of technologies banned from export and 26 categories of restricted export, involving AI malicious code generation, cell and gene therapy platforms, perovskite battery technology, and others. Public comments are accepted until November 15, and export registration takes effect immediately.

On August 17, 2026, an investigation by foreign media revealed that Chinese authorities are pushing full speed ahead with the construction and external sharing of datasets, attempting to change the landscape dominated by Western language models and implant official ideology into global AI.

On August 17, WeChat updated the "WeChat Privacy Protection Guidelines," specifying that when using the AI assistant Xiaowei, it collects users' typed text, voice, images, documents, and output content, and that when Xiaowei is invoked in scenarios such as Official Accounts, Channels, and Moments, it also processes the information users view or enter in the corresponding scenarios.

On August 14, 2026, media reported that, in response to China's stringent AI algorithm regulatory thresholds, Apple separately trained a large language model for the Chinese market and connected it to local model services.

In 2026, China issued Order No. 834, restricting foreign companies from collecting information on China's supply chains and conducting due diligence on suppliers; exit bans may be imposed on relevant personnel found to have discriminated against Chinese suppliers.

Two days after Didi listed on the New York Stock Exchange, the Cyberspace Administration of China announced the launch of a network security review of the company; its app was subsequently forced off shelves, and it was ultimately delisted in June 2022 and hit with a massive fine.

China enacted the Data Protection Law in 2021.