An Implementation Plan for Improving the Security of Data Circulation Governance and Better Promoting the Marketisation and Value Realisation of Data Elements jointly released by the National Development and Reform Commission and five other government departments on 15 January clarifies the security rules for corporate data circulation. The document will provide support to enterprises in compiling catalogues of data resources, analysing the security risks of data circulation and formulating measures for data protection by categories and grades. The Plan calls for efforts to provide strong safeguards for the circulation of personal data and improve the mechanisms for personal data rights protection. Mechanisms for defining responsibility for data circulation security will be formulated and improved and efforts will be made to explore and establish mechanisms for data circulation security audits and traceability.

The provincial government of Guangdong unveiled its 2025 action plan for building a modern industrial system on 6 February. The plan puts forward eight tasks: building a strong foundation for scientific and technological innovation; fostering outstanding industrial clusters; empowering intelligent technologies; promoting regional coordination and collaboration; encouraging industrial opening up and cooperation; introducing and nurturing authorised economic operators; upgrading quality and brands; and ensuring that the security of resources and production factors is guaranteed. Through these eight tasks, the plan seeks to strengthen core technologies, promote the effective commercialisation of scientific and technological achievements, consolidate and upgrade conventional industries while making deployments to drive industries of the future, expand the application of software and information services, promote the in-depth application of artificial intelligence, open up overseas markets while tapping into the domestic market, foster and attract the arrival of authorised economic operators, and strengthen the fiscal and financial system and the security of basic production factors.

The Bureau of Industry and Security has finalised a proposal prohibiting certain transactions involving the sale or import of connected vehicles integrating specific pieces of hardware and software, or those components sold separately, with a sufficient nexus to mainland China, Hong Kong, Macau or Russia.

Promulgated by the State Council on 30 September, new Regulations on Network Data Security Management will be implemented from 1 January 2025. The new regulations cover overall network data security requirements and rules, elaborate personal information protections, improve security for important data, optimise the administration of cross-border data flows, and set out the obligations of network platform service providers.