注册    登录
关注
Py学习  »  Git

Digital Economy and Data Protection Newsletter（26.09）

TMT法律论坛 • 20 小时前 • 23 次点击  

Click above｜Follow us


Recently, in the field of cross-border data transfers, Beijing released the Measures for the Administration of the Negative List for Data Export in the "Two Zones", the 2025 Negative List, and the 2026 Application Guide, further facilitating data export pathways applicable across the city. In the field of artificial intelligence, the National Cybersecurity Standardization Technical Committee released the Ethical Security Guidelines for Artificial Intelligence Applications 1.0, and the State Council's annual legislative work plan expressly calls for advancing comprehensive legislation to promote the sound development of artificial intelligence. In the governance of internet information services, the Ministry of Industry and Information Technology reported APPs (SDKs) infringing users' rights and interests, while cyberspace authorities announced filings for generative AI services and launched efforts on short-video content labeling and online reporting governance. Overseas, CISA and the G7 jointly released the Software Bill of Materials for AI: Minimum Elements guide, the European Union released draft guidelines on high-risk AI systems, the U.S. FTC began enforcing the TAKE IT DOWN Act, Singapore released version 1.5 of its Agentic AI governance framework, and Australia updated the Australian Privacy Principles Guidelines, among other developments.


HOTSPOT

HOTSPOT



The Beijing Municipal Cyberspace Administration and Two Other Authorities Issued the Measures for the Administration of the Negative List for Data Export in the China (Beijing) Pilot Free Trade Zone and the National Comprehensive Demonstration Zone for Expanding Opening-up in the Services Sector (Trial), the Negative List for Data Export Administration in the China (Beijing) Pilot Free Trade Zone and the National Comprehensive Demonstration Zone for Expanding Opening-up in the Services Sector (2025 Edition), and the Application Guide for the Negative List for Data Export Administration in the China (Beijing) Pilot Free Trade Zone and the National Comprehensive Demonstration Zone for Expanding Opening-up in the Services Sector (2026 Edition)


On May 11, 2026, the Beijing Municipal Cyberspace Administration, the Beijing Municipal Commerce Bureau, and the Beijing Municipal Government Services and Data Management Bureau jointly released the Measures for the Administration of the Negative List for Data Export in the China (Beijing) Pilot Free Trade Zone and the National Comprehensive Demonstration Zone for Expanding Opening-up in the Services Sector (Trial) and the Negative List for Data Export Administration in the China (Beijing) Pilot Free Trade Zone and the National Comprehensive Demonstration Zone for Expanding Opening-up in the Services Sector (2025 Edition), together with the Application Guide for the Negative List for Data Export Administration in the China (Beijing) Pilot Free Trade Zone and the National Comprehensive Demonstration Zone for Expanding Opening-up in the Services Sector (2026 Edition). The newly released negative list policy for the China (Beijing) Pilot Free Trade Zone and the National Comprehensive Demonstration Zone for Expanding Opening-up in the Services Sector (the "Two Zones") adopts a "1+9" institutional design, namely one set of administrative measures for the Two Zones and negative lists covering nine sectors, thereby establishing a citywide negative-list administration system for data exports. Based on Beijing's key industries, including high-level autonomous driving, the new list adds four sectoral negative lists for autonomous driving (intelligent connected vehicles), medical devices, trade logistics, and banking, covering nine industry sectors, 67 business scenarios, and 612 fields in total.


Source: Beijing Municipal Cyberspace Administration





The National Cybersecurity Standardization Technical Committee Released the Ethical Security Guidelines for Artificial Intelligence Applications 1.0


On May 19, 2026, the National Cybersecurity Standardization Technical Committee released the Ethical Security Guidelines for Artificial Intelligence Applications 1.0. Focusing on ethical security impacts in AI application activities, the document sets out ethical security concepts and governance principles for AI applications and provides security guidelines from the perspectives of general requirements, application development, service provision, and application use. The Guidelines clarify that they are a principled and referential technical document and should be applied in coordination with existing laws, regulations, and departmental rules where matters such as personal information, automated decision-making, content labeling, algorithm governance, and intellectual property are involved.


Source: National Cybersecurity Standardization Technical Committee  







NEWSLETTER

NEWSLETTER


（Click on the source or copy the corresponding link to view the details）




LEGISLATION

  1. The General Office of the State Council released the State Council’s 2026 Annual Legislative Work Plan, expressly committing to improve AI governance and to accelerate comprehensive legislation on the healthy development of AI

    Source: www.gov.cn (Chinese Government Network)


  2. The National Medical Products Administration (NMPA) released the Implementing Measures for the Protection of Drug Trial Data

    Source: National Medical Products Administration (NMPA)


  3. The Cyberspace Administration of Beijing and two other departments released the Administrative Measures for the Data Export Negative List of the China (Beijing) Pilot Free Trade Zone and the National Comprehensive Demonstration Zone for Expanding Opening-up of the Service Sector (Trial), the Data Export Management List (Negative List) of the China (Beijing) Pilot Free Trade Zone and the National Comprehensive Demonstration Zone for Expanding Opening-up of the Service Sector (2025 Edition), and the Filing Guidelines for the Data Export Management List (Negative List) of the China (Beijing) Pilot Free Trade Zone and the National Comprehensive Demonstration Zone for Expanding Opening-up of the Service Sector (2026 Edition)

    Source: Cyberspace Administration of Beijing



INDUSTRY TRENDS

  1. The Ministry of Industry and Information Technology (MIIT) released a notice on apps (SDKs) that infringe user rights and interests (3rd batch of 2026, 56th batch overall)

    Source:  The Ministry of Industry and Information Technology (MIIT)


  2. The Ministry of Justice issued an announcement stating that practices related to the EU’s foreign-subsidies investigations constitute improper extraterritorial jurisdiction

    Source:  Ministry of Justice


  3. The Supreme People’s Court released 5 cases relating to crimes of infringing citizens’ personal information

    Source:  Supreme People’s Court


  4. The Reporting Center of the Cyberspace Administration of China (CAC) compiled the Guide to Online Reporting, the Guide to Online Rumor-Refutation, and the Guide to Reporting Online Infringement, systematically explaining the basics of online reporting and rumor-refutation, as well as reporting channels and methods

    Source:  Cyberspace Administration of China (CAC)


  5. The Cyberspace Administration of China (CAC) released an announcement on filing information for generative AI services (March to April 2026)

    Source: Cyberspace Administration of China (CAC)

    https://www.cac.gov.cn/2024-04/02/c_1713729983803145.htm?sessionid=


  6. The Cyberspace Administration of China (CAC) released an announcement on the 23rd batch of domestic blockchain information service filing numbers

    Source:  Cyberspace Administration of China (CAC)


  7. The Central Cyberspace Affairs Commission rolled out a comprehensive deployment to advance the standardized labeling of short-video content

    Source:  Cyberspace Administration of China (CAC)


  8. The National Cyber and Information Security Information Notification Center reported 41 mobile apps that illegally collect and use personal information

    Source:  National Cyber and Information Security Information Notification Center


  9. The Cybersecurity Bureau of the Ministry of Public Security issued an “AI-generated content security” reminder and disclosed an administrative-penalty case against an individual

    Source:  Cybersecurity Bureau of the Ministry of Public Security


  10. The Cybersecurity Bureau of the Ministry of Public Security announced that cyber-police cracked 2 cases involving paid deletion of negative product reviews, with 7 people held in criminal detention

    Source:  Cybersecurity Bureau of the Ministry of Public Security


  11. The National Data Administration released the second of its second batch of representative cases on putting public data “to work” | Worry-free purchasing of used new-energy vehicles in Shanghai

    Source:  National Data Administration


  12. The National Data Administration released the first of its second batch of representative cases on putting public data “to work” | Energy and meteorological data supporting the full industrial chain of new-energy development and utilization

    Source:  National Data Administration


  13. The National Information Security Standardization Technical Committee (TC260) released 1 planned recommended national cybersecurity standard (project list)

    Source:  National Information Security Standardization Technical Committee (TC260)


  14. The National Information Security Standardization Technical Committee (TC260): 10 national cybersecurity standards approved and released

    Source: National Information Security Standardization Technical Committee (TC260)

    https://www.tc260.org.cn/portal/article/2/5fe2f07b128a4811b316be53e4566468?sessionid=


  15. The National Information Security Standardization Technical Committee (TC260) released the Ethics and Security Guidelines for AI Applications 1.0

    Source:  National Information Security Standardization Technical Committee (TC260)


  16. CCTV News reported the verdict in the nation’s first case of AI ghost-writing of “product-recommendation posts”, setting a red line for the governance of “digital slop”

    Source:  CCTV News


  17. Chongqing launched a “Qinglang (Clear and Bright): Rectifying Chaos in AI Applications” special campaign

    Source:  Cyberspace Administration of Chongqing


  18. Cyberspace Administration of Hainan: completed the nation’s first security assessment for the export of remote-sensing satellite data

    Source:  Cyberspace Administration of Hainan


OVERSEAS

  1. International: CISA and the G7 jointly released the Software Bill of Materials for AI — Minimum Elements guidance, aimed at helping public- and private-sector stakeholders improve the transparency of AI systems and supply chains

    Source: CISA

    https://www.cisa.gov/resources-tools/resources/software-bill-materials-ai-minimum-elements


  2. EU:

    1. The EDPB released Opinion 13/2026 on the Finnish Data Protection Ombudsman’s draft decision approving, pursuant to GDPR Article 43(3), the accreditation requirements for certification bodies

      Source: EDPB

      https://www.edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-132026-draft-decision-office-data_en


    2. The European Commission released draft guidelines on high-risk AI systems

      Source: European Commission

      https://digital-strategy.ec.europa.eu/en/library/draft-commission-guidelines-classification-high-risk-ai-systems


    3. CJEU: confirmed that regulators may intervene to determine the standards and amount of fair remuneration for the online use of press publications

      Source: EUR-Lex

      https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62023CJ0797


  3. US:

    1. The FTC began enforcing the TAKE IT DOWN Act and released accompanying resources

      Source: FTC

      https://www.ftc.gov/news-events/news/press-releases/2026/05/ftc-begins-enforcing-take-it-down-act


    2. The Oklahoma Attorney General sued Temu, alleging unlawful collection of personal data and deceptive business practices

      Source: Office of the Oklahoma Attorney General

      https://oklahoma.gov/oag/news/newsroom/2026/may/drummond-files-lawsuit-against-temu-for-stealing-oklahomans-data-and-deceiving-consumers.html


    3. The Texas Attorney General launched an investigation into Meta glasses, to protect Texas residents’ privacy from unlawful surveillance and facial-data collection

      Source: Texas Attorney General

      https://texasattorneygeneral.gov/news/releases/attorney-general-ken-paxton-launches-investigation-meta-glasses-protect-texans-privacy-unlawful


    4. The Texas Attorney General sued Netflix, alleging that it unlawfully collected user data without users’ knowledge or consent and surveilled children and consumers in Texas

      Source: Texas Attorney General

      https://www.texasattorneygeneral.gov/news/releases/attorney-general-ken-paxton-sues-netflix-spying-texas-kids-and-consumers-illegally-collecting-users


  4. UK: The ICO fined South Staffordshire Plc and South Staffordshire Water Plc £963,900 after a serious cyberattack led to the personal information of 633,887 people being stolen and published on the dark web

    Source: ICO

    https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/


  5. France:

    1. The CNIL released its 2025 annual report, with both the total amount of fines and the number of complaints reaching record highs

      Source: CNIL

      https://www.cnil.fr/fr/rapport-annuel-2025


    2. The CNIL published an article on privacy-protection issues in the digital euro project

      Source: CNIL

      https://cnil.fr/fr/confidentialite-de-leuro-numerique-ou-en-sommes-nous


  6. Germany: The Hamburg supervisory authority assessed the Russmedia case, clarifying the boundaries of platform governance

    Source: Hamburg DPA

    https://datenschutz-hamburg.de/fileadmin/user_upload/HmbBfDI/Datenschutz/Informationen/260512_Information_Praxisfolgen_Russmedia.pdf


  7. Belgium:

    1. A fintech company was fined €120,000 for breaches in the performance of its duties

      Source: Belgian Data Protection Authority

      https://www.gegevensbeschermingsautoriteit.be/burger/de-geschillenkamer-legt-3-boetes-op


    2. The APD/GBA released several penalty decisions concerning issues in call-recording/monitoring scenarios, including insufficient transparency, the absence of a processor contract, test recordings, inadequate notice to employees, and recording-retention periods

      Source: Belgian Data Protection Authority

      https://www.autoriteprotectiondonnees.be/citoyen/la-chambre-contentieuse-inflige-3-amendes


  8. Spain: The AEPD fined Medios de Prevención Externos Sur €36,000 after a ransomware attack led to the breach of health and identity data

    Source: AEPD

    https://www.aepd.es/documento/ps-00528-2025.pdf


  9. Poland: Amendment to the National Cybersecurity System Act — sending notifications to entities entered into the register ex officio

    Source: Government of Poland

    https://www.gov.pl/web/cyfryzacja/nowelizacja-ustawy-o-krajowym-systemie-cyberbezpieczenstwa-ksc--wysylka-zawiadomien-po-wpisach-z-urzedu-do-wykazu


  10. Slovenia: The Commissioner issued an opinion on the disclosure of rental-car users’ personal data to vehicle owners

    Source: Information Commissioner of Slovenia

    https://www.ip-rs.si/mnenja-zvop-2/posredovanje-osebnih-podatkov-kon%C4%8Dnih-uporabnikov-rent-a-car-vozila-lastniku-1778767206


  11. Singapore:

    1. The Infocomm Media Development Authority (IMDA) released version 1.5 of the Model Governance Framework for Agentic AI

      Source: IMDA

      https://www.imda.gov.sg/-/media/imda/files/about/emerging-tech-and-research/artificial-intelligence/mgf-for-agentic-ai.pdf


    2. The Government and Google published the findings of the AI Agents Sandbox study

      Source: CSA

      https://www.csa.gov.sg/news-events/press-releases/ai-agents--insights-from-the-singapore-government-and-google-sandbox-/


    3. The Infocomm Media Development Authority (IMDA) released a case study on the responsible deployment of OpenClaw

      Source: IMDA

      https://www.imda.gov.sg/-/media/imda/files/about/emerging-tech-and-research/artificial-intelligence/openclaw-case-study.pdf?ref=inline-article


  12. Australia:

    1. The OAIC updated Chapter 3 of the APP Guidelines, i.e. the guidance on “collection of solicited personal information”

      Source: OAIC

      https://www.oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-3-app-3-collection-of-solicited-personal-information


    2. The OAIC updated its statement on the Instructure / Canvas global cyber incident

      Source: OAIC

      https://www.oaic.gov.au/news/media-centre/statement-on-instructure-canvas-cyber-incident


    3. The NSW IPC released a guide on the privacy risks associated with generative AI tools

      Source: IPC

      https://www.ipc.nsw.gov.au/sites/default/files/2026-05/Guide_Privacy_risks_associated_with_the_use_of_generative_AI_tools_May_2026.pdf


  13. New Zealand: The OPC released its latest privacy survey, finding that issues such as AI decision-making, facial recognition, and children’s digital lives are now mainstream privacy concerns

    Source: OPC

    https://www.privacy.org.nz/tuhono-connect/statements-media-releases/new-survey-privacy-concerns-are-no-longer-niche-worries/


  14. Turkey:

    1. The KVKK published a data-breach notification concerning 1Onbir Grup, involving unauthorized access to and deletion of data and affecting employees, users, customers/prospective customers, and others

      Source: KVKK

      https://www.kvkk.gov.tr/Icerik/8750/kamuoyu-duyurusu-veri-ihlali-bildirimi-1onbir-grup-bilisim-teknolojileri-otomotiv-sanayi-ticaret-limited-sirketi


    2. The KVKK and the Radio and Television Supreme Council (RTÜK) of Turkey released a guide on the processing of personal data in live-broadcast reality-show programs, aimed at balancing privacy protection with the public’s right to know / the public interest

      Source: KVKK

      https://www.kvkk.gov.tr/Icerik/8741/canli-yayimlanan-reality-show-niteligindeki-programlarda-kisisel-verilerin-islenmesine-yonelik-rehber-lansmani


  15. Industry Developments:

    1. Google released new Android security and privacy features for 2026

      Source: Google

      https://blog.google/security/whats-new-in-android-security-privacy-2026/


    2. OpenAI adopted Google’s SynthID (content provenance)

      Source: OpenAI

      https://openai.com/zh-Hans-CN/index/advancing-content-provenance/



Note

本文由Gen AI翻译，仅供参考。

Translated by Gen AI service. For reference only.


本期编辑：吴小旭 陈煜烺 颜宇涵 季开 张膑月 张丽

Python社区是高质量的Python/Django开发社区
本文地址：http://www.python88.com/topic/196828
登录后回复
关于   移动版
Py学习 - 专注于Python技术发展的社区(原Django社区)
沪ICP备11025650号