China doesn’t see data as a private matter. It treats data as a factor of production—a national economic resource on par with land, labor, capital, and technology. The European Union views it as a privacy right. The United States sees it as a corporate asset. Beijing’s approach flips those priorities: economic utility first. State security second. Individual rights third.
This framework drives everything from domestic exchanges to overseas infrastructure. Over the past year, China has accelerated. National Data Administration, created in 2023, now pushes the “AI-plus” initiative launched late 2025. Three national data work conferences. Seven Digital Economy Innovation Development Pilot Zones. More than 30 new standards slated for 2026 on public data, infrastructure, AI agents, datasets, and cataloging. All under a “3+1=4” structure: Cybersecurity Law, Data Security Law, Personal Information Protection Law—or PIPL, effective November 2021—and Regulation on Network Data Security Management.
Cross-border flows? Strict. Security assessments. Standard contractual arrangements. Certification. Depends on processor, data type, transfer volume. No free pass.
Markets make it real. Data exchanges in Shanghai, Shenzhen, Beijing, Guiyang, Guangzhou. Shanghai listed over 5,000 products by 2025. National trading hit 87.7 billion yuan in 2022, projected to 515.6 billion by 2030. Data trades like commodities. Absent in the West.
And abroad. Digital Silk Road—part of Belt and Road—signs deals with over 16 countries. Builds telecoms, data centers, submarine cables, 5G in Southeast Asia, Central Asia, Africa, Latin America. Exports governance too: training on monitoring, content control, data rules. Chinese firms must store data in China. Partners face security checks. Infrastructure sets standards. The country that builds it often dictates terms.
Recent moves amplify this. World Data Organization launched April 2026 in Beijing—the first global body for data development and governance. Over 200 members from 40 countries. Aims to bridge policy gaps, cut compliance costs for multinationals, push standards on sharing and flows. Xi Jinping sent congratulations; Vice Premier Ding Xuexiang attended. Beijing positions it to shape rules before rivals respond, as noted in Xinhua coverage and Xinangians analysis.
From Domestic Control to Global Export
April brought teeth. State Council issued Regulations on Industrial and Supply Chain Security, effective immediately April 7. Coordinates 15 agencies—MOFCOM, MIIT, CAC—to monitor chains. Bans supply disruptions seen as discriminatory. Restricts foreign data collection on chains, clashing with U.S. UFLPA or EU CSDDD audits. ESG diligence? Risky now. “Interrupts normal transactions” undefined. Flexibility for enforcers, as Morgan Lewis details.
Companion rules counter foreign extraterritorial measures. No grace period. Hits multinationals balancing U.S., EU demands. Data sovereignty vise tightens.
January amendments to Cybersecurity Law ramped penalties, aligned with PIPL and Data Security Law. Extraterritorial reach: overseas acts endangering China’s cyber realm face freezes, sanctions. Fines up. AI ethics monitoring. Supports innovation but demands risk controls, per Mayer Brown.
AI ties in. Agentic AI under multiple regimes: algorithms, data protection, liability. Cross-border LLM calls? PIPL triggers. Consent, PIPIA reports, agreements needed, Reed Smith warns. State security authorities flag AI data exfiltration risks, per Global Times.
Global pushback grows. Host data rules suppress China’s export quality, especially high-tech to developed markets, a ScienceDirect study finds. HCSS report details China’s “lawfare”: reinterprets norms, builds parallels like Belt and Road dispute mechanisms. Lead author Benedetta Girardi: “China is not rejecting the rules-based order outright. It is reinterpreting and operationalising it in ways that increase its strategic flexibility and long-term influence.” See HCSS.
ORF notes Global Governance Initiative blends diplomacy, intelligence for AI norms prioritizing sovereignty over privacy. World AI Cooperation Organisation, Global AI Governance Initiative build capacity in Global South.
Developing nations lean in. China’s package—infrastructure, funding, tech, training—beats EU’s rules-without-builds. GDPR demands compliance sans support. PIPL inverts: state over individual. UK diverges from GDPR too.
Stakes? AI data control. Largest pools win. Interconnected under China’s sway if exchanges link globally. U.S. self-regulation lags. EU rights focus slows. Beijing builds.
But cracks show. Censorship hampers AI reasoning—models filter 96% content, yet jailbreaks expose limits. As WSJ reports (implied in trends), uncensored Western models threaten control. Brookings urges U.S.-China safety channels despite distrust.
Competition sharpens. World Data Organization could pre-coordinate norms. Shanghai’s April 2026 cross-border tweaks ease some flows, but core stays tight, Lexology notes. CAC drafts lighter rules for small processors—under 100,000 individuals—simplifying PIPL, per LinkedIn updates.
Multinationals adapt. Local servers. Compliance silos. Dual clouds. Yet conflicts multiply. Border phone checks risk PIPL clashes. Supply audits banned.
China’s model spreads where utility trumps rights. Digital Silk Road nodes adopt it. WDO draws Global South. If infrastructure prevails, Beijing’s governance follows.
West responds late. U.S. eyes sovereign cloud barriers in trade reports. EU frets access. But building lags policy. The race favors makers.
Data sovereignty hardens. Global flows fragment. Winners control pipes.
WebProNews is an iEntry Publication